Behavioral task
behavioral1
Sample
68c2d79755ff3dba6a8346b7166a776b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68c2d79755ff3dba6a8346b7166a776b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68c2d79755ff3dba6a8346b7166a776b_JaffaCakes118
-
Size
32KB
-
MD5
68c2d79755ff3dba6a8346b7166a776b
-
SHA1
b6e539e1e5e27514f32fae46d0487a53d49c67a5
-
SHA256
ca868415d15a1b2b6ce4e3203179e39ace0a94ab57160846f23f39b14831f350
-
SHA512
9f4e747dbaf71aedd64153ee58a871a52d5184e201e2ae2f2a332bd49eeab01634efd5df63854a2fcb2a4a657239fb4481bc5a84650296338d7120b3102d30ac
-
SSDEEP
768:EHytBs5fMv/Do9U95nehR05KD+9S+v1VXXeEY/r:EHBuvbo9U9sRBwSubOr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c2d79755ff3dba6a8346b7166a776b_JaffaCakes118
Files
-
68c2d79755ff3dba6a8346b7166a776b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE