Behavioral task
behavioral1
Sample
6a49c6963b6f6e44629b7178649b13b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a49c6963b6f6e44629b7178649b13b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a49c6963b6f6e44629b7178649b13b9_JaffaCakes118
-
Size
259KB
-
MD5
6a49c6963b6f6e44629b7178649b13b9
-
SHA1
aee2d6ca798c9dfa9644bd15e4823ac93a0d1b4f
-
SHA256
26e92b282e66f842d586c0cd12b9a1a6d75acea6884a305e7b3f2782fc9ae970
-
SHA512
de7ae514d0ae0478efcf4166f9925546b48f430b10a42402e31990fc632346ad8501fd8f6b77949738a7660708bb1d6447bd6c5bf509f626d4d7a766f7826f41
-
SSDEEP
6144:ExQsvvujRZ3ZKVlNrS0y5F266+AbXNdQKDNO:hU03kzJS0y3266+AzjDg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a49c6963b6f6e44629b7178649b13b9_JaffaCakes118
Files
-
6a49c6963b6f6e44629b7178649b13b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE