Behavioral task
behavioral1
Sample
b06164aa50c0fc340b0877d465b04ea4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b06164aa50c0fc340b0877d465b04ea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b06164aa50c0fc340b0877d465b04ea4_JaffaCakes118
-
Size
378KB
-
MD5
b06164aa50c0fc340b0877d465b04ea4
-
SHA1
2c571aae0cac7dcaac738852fd8baf3ed4352f53
-
SHA256
603531a1e469deb6e1199d749ea3ede038b63210fd5991ee288d58d191a7ff64
-
SHA512
8f7dc1fa89541c73627e2f2613ea8d48f7d0af8ef9a837dfd98fccc7d909fcf059096bc4df3dae5a61d98dc9c2143b931e04f647e16a3a6df706381f89c16bbf
-
SSDEEP
6144:kc5XIyrzZZUD1FIUzNaLpXgrl0wG/QHcq+JOuPp90z4URFOwjnM:kc5TrzZWD1FzzNWpXtwG/IsfPP0zLRsL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b06164aa50c0fc340b0877d465b04ea4_JaffaCakes118
Files
-
b06164aa50c0fc340b0877d465b04ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE