Behavioral task
behavioral1
Sample
a603c2a0aedf1758c111824990a614fa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a603c2a0aedf1758c111824990a614fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a603c2a0aedf1758c111824990a614fa_JaffaCakes118
-
Size
149KB
-
MD5
a603c2a0aedf1758c111824990a614fa
-
SHA1
2eed8dfdec08c96cd1b3d6e8bbd8c1ab7f1d5668
-
SHA256
d82609210f0a9515be56325e0902b89b4af1aa1faf51f1e257cf10e33e213442
-
SHA512
e53c53dcf4ea9821954fa7b73155805e79ba3d8859f3a472293ac43e1e039a852ed578ea7eee85b6cc1b7fedb1d2324ad5e10af79ba4735c9e02bf0934bd2ccc
-
SSDEEP
3072:vfvXMXHMGIvm4Ga4zaPClN2T466cNhippm7rRIf1Rc:3PtGGGd+PCfq46xiOrRI9Rc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a603c2a0aedf1758c111824990a614fa_JaffaCakes118
Files
-
a603c2a0aedf1758c111824990a614fa_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE