Behavioral task
behavioral1
Sample
969e428356abf7c96621c881a0d0d5e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
969e428356abf7c96621c881a0d0d5e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
969e428356abf7c96621c881a0d0d5e7_JaffaCakes118
-
Size
19KB
-
MD5
969e428356abf7c96621c881a0d0d5e7
-
SHA1
630560d83bd0c6c5af6c70e4e6c14fbb63a025e2
-
SHA256
dae4c839b07aa7f0af126735e1b6749f0efee2b2c8e8e366cb35c69b2e19c145
-
SHA512
4d363b5356a8e76aa09dbb686cdebda374ced9be13e110aac6a24c343c2bd0a0ea3456636229db592257823743a854735109c48fec5dd891f2c63d9277f85f86
-
SSDEEP
384:b7RQ6qOhmfko1bOAP8DKEi63QoTE9erb268MdhWL4e9:b9PnhAko1bO5KEiET5rb8MdhWL4a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969e428356abf7c96621c881a0d0d5e7_JaffaCakes118
Files
-
969e428356abf7c96621c881a0d0d5e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE