Behavioral task
behavioral1
Sample
6796f6da996cc3a651761d3f05bda18e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6796f6da996cc3a651761d3f05bda18e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6796f6da996cc3a651761d3f05bda18e_JaffaCakes118
-
Size
25KB
-
MD5
6796f6da996cc3a651761d3f05bda18e
-
SHA1
fb3bedbbc87aefd1fa566b3576336043f8a29292
-
SHA256
66b346c482837f1ff6feb6d7448dc3072e6898b7913d419c5dcee005992403b5
-
SHA512
68c67947417e2bfb157e5fd49d340ea137bebe17bd261de29862ef983a1df1295ecc7d47f43b5138e421369e900954a7491af5e8293b35188fab5f1e9ad2874d
-
SSDEEP
384:cvR03Sk/7u2jQfntGupmR99ksbDXG4Lv9VFivPr/hinJ3b0dVrPI2D5CoYZcUpmP:cJ03lyfwSs9Lv0vPYndSIroPUpm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6796f6da996cc3a651761d3f05bda18e_JaffaCakes118
Files
-
6796f6da996cc3a651761d3f05bda18e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE