Behavioral task
behavioral1
Sample
6a118355aff00a46eb44fb2a58a388ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a118355aff00a46eb44fb2a58a388ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a118355aff00a46eb44fb2a58a388ca_JaffaCakes118
-
Size
22KB
-
MD5
6a118355aff00a46eb44fb2a58a388ca
-
SHA1
f4808f95eff52dc38604eabd16e038e7d594c29d
-
SHA256
530549afcfb5410dd5b8fffab36d631b90bcb5371826447b7a3240c807f54cb9
-
SHA512
7b8ffc98d07137da13ec73138ef61a9175cb2940dace90f9efbe6af039730d953b4e14016e27367aab18e0d32858cdcb3cbac2c62e14b79569096e4c3269a5fe
-
SSDEEP
384:pgewA8EQRtcH+AcrJ+iQVHS9VLF/rMCrOkCFSanJRu9KT3tgYz+1zQAfsRMqUT:zYztktcmVmHrRrFhygID/uzTkXUT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a118355aff00a46eb44fb2a58a388ca_JaffaCakes118
Files
-
6a118355aff00a46eb44fb2a58a388ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 916KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 840KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE