Behavioral task
behavioral1
Sample
69db3774c6b589b973dcbbccb6174618_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69db3774c6b589b973dcbbccb6174618_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69db3774c6b589b973dcbbccb6174618_JaffaCakes118
-
Size
63KB
-
MD5
69db3774c6b589b973dcbbccb6174618
-
SHA1
fd862b3a3986e7d9006dec91ddc802ed8e5ac4b8
-
SHA256
9848a8b2449eff0b8e03fb8d9245bf98b9b271907b74feac6b4127c0a4a8a540
-
SHA512
c2ba59d2bc322b12793d97bfa6f9eca3745a2bc700f16f30156a5f518e1c9dac1e5d6faa151b28de846a13a9d098421827bb23b5536b829f796f83fca85ad1bf
-
SSDEEP
1536:+2vN0/56c3RuGis9S63EDeEh6GiMUl+b7LyJ+1R/Z:tN056+RulEkefGNUl+byw1Rh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69db3774c6b589b973dcbbccb6174618_JaffaCakes118
Files
-
69db3774c6b589b973dcbbccb6174618_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE