Behavioral task
behavioral1
Sample
682c5c65f6716d4aa0d1ccca2b2ec504_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
682c5c65f6716d4aa0d1ccca2b2ec504_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
682c5c65f6716d4aa0d1ccca2b2ec504_JaffaCakes118
-
Size
173KB
-
MD5
682c5c65f6716d4aa0d1ccca2b2ec504
-
SHA1
e97bf8159dee69cb48aef0ae620fdd5e93c4ce57
-
SHA256
b11007c40e5220c3d5b1ac4b0d9cf999a8e7ca87fe9299e048f89201df4d61a3
-
SHA512
e60ea2532af2ed9e7c0f3539cf89ef10cc6604b03306843e5493b1836a87641ccc0398cfccc2ecbe10e4fc5379f5c2f450a84ca48f7b1c464ee20f133c581214
-
SSDEEP
3072:o55yUbT6jV9nxNBmEtSP8svl/42oh0rY5kFhnenU+JlKv82Lp1QivRXeOI:W5yUbT6j7xNBBtSU4lPrYSbeU+JlS3pm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 682c5c65f6716d4aa0d1ccca2b2ec504_JaffaCakes118
Files
-
682c5c65f6716d4aa0d1ccca2b2ec504_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE