Behavioral task
behavioral1
Sample
6efb2e4c5892b85193c727f3b469c461_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6efb2e4c5892b85193c727f3b469c461_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6efb2e4c5892b85193c727f3b469c461_JaffaCakes118
-
Size
26KB
-
MD5
6efb2e4c5892b85193c727f3b469c461
-
SHA1
69948a91f4317d74fba35bc71d82a7139b3b0883
-
SHA256
276ab17664b560f689bef23f9f0ca2b56f1d1ef8489df0ee2712bbb0a4209f0d
-
SHA512
0070033bb683bc7d124c9f3f8d61d96b54c627efb0bd472c21b2e6ed1487bd77f7116fa2149defbc0ca985522a26eaa16e100ca0381fd94a5fa8cd2233273615
-
SSDEEP
768:4pzSj494CZSqnCL4Rwsbnyrio/7w/Eb+9:4pzSchvCceWyrigbm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6efb2e4c5892b85193c727f3b469c461_JaffaCakes118
Files
-
6efb2e4c5892b85193c727f3b469c461_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE