Behavioral task
behavioral1
Sample
8c06d89c560a64c2463764a0c59f25b4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8c06d89c560a64c2463764a0c59f25b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c06d89c560a64c2463764a0c59f25b4_JaffaCakes118
-
Size
19KB
-
MD5
8c06d89c560a64c2463764a0c59f25b4
-
SHA1
268e0fb3eb006a29c81a023a6c0ec0feb6bec8b2
-
SHA256
90ac4d96c65ed85e14a7cd4dbba41dae76d18d9395ecede430f16e618415b48e
-
SHA512
d86604f860b34076fcdcf7756a7e04a4dd41b2b5036162c13a4e8c25a5be4164431fff905e23414005811b1f87008a1f14aef62d52f4dfbee2473ddc613dadcd
-
SSDEEP
384:uYNBEHoGaC+tBz0UcZSt5K0xRoYfFpiEuVmEmzDZ+ouBRdO:uYNQ+/0UcZm5H6qinVSzaBRdO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c06d89c560a64c2463764a0c59f25b4_JaffaCakes118
Files
-
8c06d89c560a64c2463764a0c59f25b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE