Behavioral task
behavioral1
Sample
68c228bce8118e7de449e9a41393eac1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68c228bce8118e7de449e9a41393eac1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68c228bce8118e7de449e9a41393eac1_JaffaCakes118
-
Size
23KB
-
MD5
68c228bce8118e7de449e9a41393eac1
-
SHA1
51e5650767971628873e695f20b9be7f7af27cab
-
SHA256
5a81335b9eafe4d6dc2cbfbdb2dd69949902557cb851cefb6b3c108f880b9e86
-
SHA512
d259152e3618091481e81d6667740bbdc1f5602c73f78af786788f9994d58d729dc4c22e738426b49982b68d4b0c46001e8153c8811575ef7823389a29dbb806
-
SSDEEP
384:hA330x4uaJYFG01Rg75ixgvq7TvOAp/EuWbCPYrU3UTZ/2wriGgGv:qH0aB0Kcxgvq7TVp/obC0d2wriFGv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c228bce8118e7de449e9a41393eac1_JaffaCakes118
Files
-
68c228bce8118e7de449e9a41393eac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE