Behavioral task
behavioral1
Sample
f65ab7cd6edd0e28e8af9283246b30a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f65ab7cd6edd0e28e8af9283246b30a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f65ab7cd6edd0e28e8af9283246b30a8_JaffaCakes118
-
Size
372KB
-
MD5
f65ab7cd6edd0e28e8af9283246b30a8
-
SHA1
40de8a9cf006d6f73ccd5ff992ec857fc3840817
-
SHA256
c2aee86483687e5cc13f93b24746a76d362f23ce57096802e83bb82c66983789
-
SHA512
202299e5e28544833830a20b8a71b146f6b0fb0905c262c3550acb5f522679d931ea157317b2fb6b5fe86dc8a9ee549696f263bfc8154a2502544c4f51fbc2a9
-
SSDEEP
6144:eG78LjzOANvSAsQLqF9pXMiY3sGB6UduRfLtcJ:p7kmAN6omFMb3sGB6UduRfLaJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65ab7cd6edd0e28e8af9283246b30a8_JaffaCakes118
Files
-
f65ab7cd6edd0e28e8af9283246b30a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE