Behavioral task
behavioral1
Sample
9651115a2c89cdd5ebea4339b79e5c73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9651115a2c89cdd5ebea4339b79e5c73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9651115a2c89cdd5ebea4339b79e5c73_JaffaCakes118
-
Size
73KB
-
MD5
9651115a2c89cdd5ebea4339b79e5c73
-
SHA1
5cd531a027267b18e07026184f79b21ea379923a
-
SHA256
9d3b9e6e6598b1497a09cab06c3a9494218d56c185950e3b408b1cff9814755a
-
SHA512
ab02902713eac2883d985cace7df15346dcdb976c09978a6a42af42ce68ef830c52a20a46090561eebcc20cebec1c1268ea0f3bb78ab3c32670d75a4ffcf8d75
-
SSDEEP
1536:67jITPVkVFUYNYo0lOj58LyrD3b2NixSu7jqwWy3IxbhJyN:670TCF7bXbQM4xbU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9651115a2c89cdd5ebea4339b79e5c73_JaffaCakes118
Files
-
9651115a2c89cdd5ebea4339b79e5c73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE