Behavioral task
behavioral1
Sample
68241f766dea02306a7deaa2fcd57146_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68241f766dea02306a7deaa2fcd57146_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68241f766dea02306a7deaa2fcd57146_JaffaCakes118
-
Size
143KB
-
MD5
68241f766dea02306a7deaa2fcd57146
-
SHA1
f9a3a6fdd78e4eba8201accd5d81a42f239c7c58
-
SHA256
979fc379e221b1f957ff9e426300a67a8449ec33ac2ef460fbe125cabb7edebe
-
SHA512
e02cb5116a8a410b3882da3bb187215db8bc7de4e4e4b121575f3a9a418c30797021d76e78c8c0454a72ec8d61525cddc49ede07addd169cbfc15da649a5bbee
-
SSDEEP
3072:pwgNp/hZpsRhQ5OPK8tGQu2PvODS7HyrxQrTMZyZq6cOG:Cg3rGRS5uX5u7txKzUdOG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68241f766dea02306a7deaa2fcd57146_JaffaCakes118
Files
-
68241f766dea02306a7deaa2fcd57146_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE