Behavioral task
behavioral1
Sample
d665bb5774c773cc1ee21aa86f175761_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d665bb5774c773cc1ee21aa86f175761_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d665bb5774c773cc1ee21aa86f175761_JaffaCakes118
-
Size
41KB
-
MD5
d665bb5774c773cc1ee21aa86f175761
-
SHA1
5943662c5fae3a726a9dc1c193011365e5faaa16
-
SHA256
97d13e71c05def33d61f7df2b0e3914f525cb6baf8d988610f194a8fa0e8e7e4
-
SHA512
9dbece303229676d82d571845e6cedaa43b6cbdf11e18a7f314e61637aaac1cf0c7415e36b78e3be738a89421fda607879f4e32c55a0eb1b01635b06d3239e86
-
SSDEEP
768:/dU96GC809cEYt4Gwl6Uc3f/mg4A2/Edk5/UypAEBw0:/UCpbJl6U44sGJUz0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d665bb5774c773cc1ee21aa86f175761_JaffaCakes118
Files
-
d665bb5774c773cc1ee21aa86f175761_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 83B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ