Behavioral task
behavioral1
Sample
963384f9d5efd45f04fd6a02c5509c76_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
963384f9d5efd45f04fd6a02c5509c76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
963384f9d5efd45f04fd6a02c5509c76_JaffaCakes118
-
Size
287KB
-
MD5
963384f9d5efd45f04fd6a02c5509c76
-
SHA1
2af4f2ee732f5f4cf5ef205bd3685aa56104fb4e
-
SHA256
87811f8862383ec9b1bf855ebffdabc881ac2f60fa03fffedde5808fa7586e15
-
SHA512
9ea0ed37996fd708638999921d8d482dd28ee2400c4a066587dcf33775dc03c573a2ce1080ed3e6551074602281811a7efd46b715782efe8501dc5df78b4fbf1
-
SSDEEP
6144:aIM6sk7Wmzt8uWUKEt19TEu8j2JAvzXkqRQQ0Q2iqB7o68hM1UFWfNACFoSp:jSKbyKlqRQ6H68hmAUoSp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 963384f9d5efd45f04fd6a02c5509c76_JaffaCakes118
Files
-
963384f9d5efd45f04fd6a02c5509c76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE