Behavioral task
behavioral1
Sample
83c9b6a678ad17f1e6ee481d4a30ca8c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
83c9b6a678ad17f1e6ee481d4a30ca8c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83c9b6a678ad17f1e6ee481d4a30ca8c_JaffaCakes118
-
Size
562KB
-
MD5
83c9b6a678ad17f1e6ee481d4a30ca8c
-
SHA1
1bebdf3b26d55957ab3f70030cb0c316073be61f
-
SHA256
5b0a1cbf53f1369bf029b3efa82a9769dcd7eb790cb4f8d204f70c5352cc120e
-
SHA512
76a67204670174d7b1d84c84a672fe181c2b33f7435d86f23f3e9cdc90e439d478ab435c687312e8ca6a8144a2e0b1fbf990a7aba2ea0fab3dc66c73aa453b86
-
SSDEEP
12288:3eUQIJdFIhqUl030VqhbGwXCHV3MBLnp+EbYzb1ze0:nJLIhH4Qw2Vclpi1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c9b6a678ad17f1e6ee481d4a30ca8c_JaffaCakes118
Files
-
83c9b6a678ad17f1e6ee481d4a30ca8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 547KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE