Behavioral task
behavioral1
Sample
6f08a85050d754a1875f20c30964d33e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f08a85050d754a1875f20c30964d33e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f08a85050d754a1875f20c30964d33e_JaffaCakes118
-
Size
135KB
-
MD5
6f08a85050d754a1875f20c30964d33e
-
SHA1
41b1b63665d53d1a3494fff73f968b9899a11493
-
SHA256
4eade840ba1422f0b0da07df9df79d899ab123d620bfa5204c32af7619880b4f
-
SHA512
da6870bc0b3b37900218704a527bce5874b9fca963d6d5862481e7e70ac1954c46ee8e5cb7d7082fee159fc5314a00190b9fab48d06e988eb5ed62e4b48e6036
-
SSDEEP
1536:VXUq5TXHN9l0jZZ8zjQqBbI2SbyGTJnUpgGDBOfIM:VXx5TZ/bxGTJnUpgGFOfIM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f08a85050d754a1875f20c30964d33e_JaffaCakes118
Files
-
6f08a85050d754a1875f20c30964d33e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE