Behavioral task
behavioral1
Sample
83c6052a51ff3bf4bd293f5ad3061b3e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
83c6052a51ff3bf4bd293f5ad3061b3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83c6052a51ff3bf4bd293f5ad3061b3e_JaffaCakes118
-
Size
441KB
-
MD5
83c6052a51ff3bf4bd293f5ad3061b3e
-
SHA1
47571c83b9e1178ebf87a5d846c7ae70a4ec3b13
-
SHA256
89061205d5948bcd306208fe608b4c6eee94e6bd64f206afc3b12672582633e9
-
SHA512
54386d8f76d9f9bb64c9ad86edc703f10155628b0f679e8eed5cd25a9ab97b086a00cab3164831c6718c995005f2dd7fd8abd5e09f1ac227f97af88749b7b2ac
-
SSDEEP
12288:v8A3eCuEEAW/DK4DQFu/U3buRKlemZ9DnGAeEOf+Ct:v3uGEiy+Ct
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c6052a51ff3bf4bd293f5ad3061b3e_JaffaCakes118
Files
-
83c6052a51ff3bf4bd293f5ad3061b3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE