Behavioral task
behavioral1
Sample
6f1b53b2c7f48e2a61763d48e5ecd871_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f1b53b2c7f48e2a61763d48e5ecd871_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f1b53b2c7f48e2a61763d48e5ecd871_JaffaCakes118
-
Size
18KB
-
MD5
6f1b53b2c7f48e2a61763d48e5ecd871
-
SHA1
b88bbc165120b3aa30b27b02a531399ff49330b1
-
SHA256
8ba2dec9b85766493ad9ed834d11c0a1050454d3a87a806db205a570069c71b4
-
SHA512
0cf8c411e5476b0e5db5f67e20a1946d90c7906181d398274dcf4b2b36b5df2a923a3bdd9b484fca010f9be09a73bcc850580211e2b5483c79d1b7c312e5cc07
-
SSDEEP
384:4adhuQNdGTPxf/KRlyf2gVWEcRcAT0i6dMaARbw5nqIXbUR0HKZwT3:4avNqZ3cyON0LMaARb8qComLr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1b53b2c7f48e2a61763d48e5ecd871_JaffaCakes118
Files
-
6f1b53b2c7f48e2a61763d48e5ecd871_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 639B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE