Behavioral task
behavioral1
Sample
67575f0c9d83ec86e47ba952505fec65_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67575f0c9d83ec86e47ba952505fec65_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67575f0c9d83ec86e47ba952505fec65_JaffaCakes118
-
Size
23KB
-
MD5
67575f0c9d83ec86e47ba952505fec65
-
SHA1
cb963b9bba2df7a395f5ebece618d10d96408b3d
-
SHA256
a5972bb06d2c481584a58f0178fdb60016cfdd37fa3daeb958b861c14beae22c
-
SHA512
0b41d977bc2e17a3f6afb81cc0dbf6834e603f422c3ea92eefc7f2252a0e13d5d0fe853c051fdd0a953c4cbae07c662aa26b12b253be1093f8dd480cf2ed7a35
-
SSDEEP
384:3NxV1AZri/qg+wt4flJ9g6oq1NtFuqrCV4Z5aKjOQbaz09foi2NFXQ4Ywl72KoR:3NzIdit4r99vNtjU4aMd9wi2vXQ5mS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67575f0c9d83ec86e47ba952505fec65_JaffaCakes118
Files
-
67575f0c9d83ec86e47ba952505fec65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE