Behavioral task
behavioral1
Sample
b6e3203467d9b44d8b35c6e10c1833be_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b6e3203467d9b44d8b35c6e10c1833be_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6e3203467d9b44d8b35c6e10c1833be_JaffaCakes118
-
Size
8.1MB
-
MD5
b6e3203467d9b44d8b35c6e10c1833be
-
SHA1
fee49c940ec64f690f28057f582858af8540fe3f
-
SHA256
3e8550b8ddbeef7f480356dbf868b028b8e6e0967806b78b5f0affd94817284e
-
SHA512
bc4bc453037a2ab19ffef90431a211eb68b5ed4a0d77077c5e951aa0cb1a38551056bf6686ae234e458695d7d845437b1be7d4d762dd83afb65419e5880af88e
-
SSDEEP
196608:i7effIPEsy58doQaTxLhQyZbIly38doQalArdfehQM2gsyVCQlXlAryfEQulen80:i7effIPEsy58doQaTxLhQyZbIly38doF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6e3203467d9b44d8b35c6e10c1833be_JaffaCakes118
Files
-
b6e3203467d9b44d8b35c6e10c1833be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE