Behavioral task
behavioral1
Sample
83e6d63d38d40e32a6d59bbae1942b25_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83e6d63d38d40e32a6d59bbae1942b25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83e6d63d38d40e32a6d59bbae1942b25_JaffaCakes118
-
Size
416KB
-
MD5
83e6d63d38d40e32a6d59bbae1942b25
-
SHA1
afe6005a0486befe7f183d2351e646db489331c8
-
SHA256
18a7d8ebb3a0ed01fdb3263b81da9c39373b6c9b969f264be61e9abce3964d6c
-
SHA512
b909bbae9a56faec44d02846223b328b12c5d72c444a0f19b70b20144af93715daf9a0936eba648a8e0fe42c8f9705f63b6a22e2ee9f4ac377a25143d0680d91
-
SSDEEP
6144:FKiDrDb8UwIcCH9L5d5ezLqIFQSDdABbSbIrx1L1l3ERS:IurX30CH9Eq+0BbSox1QS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83e6d63d38d40e32a6d59bbae1942b25_JaffaCakes118
Files
-
83e6d63d38d40e32a6d59bbae1942b25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE