Behavioral task
behavioral1
Sample
81e990bc61d813607ad4cb23b4ef461e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81e990bc61d813607ad4cb23b4ef461e_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81e990bc61d813607ad4cb23b4ef461e_JaffaCakes118
-
Size
713KB
-
MD5
81e990bc61d813607ad4cb23b4ef461e
-
SHA1
a99fd20f6ffabf88a416993dd1ab5c43d827381b
-
SHA256
e639185c74de95727568fd8151ae74f3f1fe43c693fe7e8bf3b0f7c660a8c605
-
SHA512
a4249d1d70c0c28c96cf999560610fe1372c74120ac8bb77ee4a4af72493aa283c38ab7eaa1c560fcb32a92a0cec155f5b599df8cea4821da05f3ab276fe4264
-
SSDEEP
6144:GWZfec9EbXDk6RkQKGrG1VVE+IwrG1VVE+Iznmy+g4g/UOPSe570Szp3oRQJ/odG:3ZWtI6Rkkunu0UOB0ts/o2OB0H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e990bc61d813607ad4cb23b4ef461e_JaffaCakes118
Files
-
81e990bc61d813607ad4cb23b4ef461e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE