Behavioral task
behavioral1
Sample
86c4fcd07296712ed6935379a63fe795_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
86c4fcd07296712ed6935379a63fe795_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86c4fcd07296712ed6935379a63fe795_JaffaCakes118
-
Size
63KB
-
MD5
86c4fcd07296712ed6935379a63fe795
-
SHA1
2b1f34757543482acba84a5f446e0b53148dd1e2
-
SHA256
78d07cb3744caddfc598167a51da2cfb5ddb2a83ef68f37807c9a4ff216d60d4
-
SHA512
213557467d58c319c7033947e27cfdb19750d2f1f8add4aeab45404e60ffc8ca5d48d0bff8b42df7119a900bc507df91bffb6b51f93c0b6b97ea9671aade1cce
-
SSDEEP
768:VzqZ269kJyAMHnKk0IXIv9saFegopxX2YcMl5t9YlaBW9iPpE9XiPOFhGq3Pt5VH:VL9YAMqmXEqbgiFcMZ/QipE97FMyPCo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86c4fcd07296712ed6935379a63fe795_JaffaCakes118
Files
-
86c4fcd07296712ed6935379a63fe795_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE