Behavioral task
behavioral1
Sample
b6408ee7a46a7edaec7872b2394026d1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6408ee7a46a7edaec7872b2394026d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6408ee7a46a7edaec7872b2394026d1_JaffaCakes118
-
Size
863KB
-
MD5
b6408ee7a46a7edaec7872b2394026d1
-
SHA1
6d290ce5344542fb0f4a12471342dee4f622e119
-
SHA256
728d8218b976fa929bc67212cc41bd8579d74a5dfa154eaa45bca1b6b9a07fcf
-
SHA512
3896ba98a4ef8c5d2913424eac386d1defcf9a6e44c85f491dc3b89e7929d4eaa636fd704aa5721b91216f2877e5f6543448efcf41cafb44d2edf30dedd361ef
-
SSDEEP
24576:65jePLKzEVoGqo41P4jmLqcU2d7BUSX+oYGB0kdmu:6oDKzEVoGyP47c5d7t+oRB5r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6408ee7a46a7edaec7872b2394026d1_JaffaCakes118
Files
-
b6408ee7a46a7edaec7872b2394026d1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 845KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE