Behavioral task
behavioral1
Sample
f6d5c5a417667d771f5c9596f91690bd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6d5c5a417667d771f5c9596f91690bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6d5c5a417667d771f5c9596f91690bd_JaffaCakes118
-
Size
137KB
-
MD5
f6d5c5a417667d771f5c9596f91690bd
-
SHA1
c16e9633a33f1f200d0ef772256ca25f5ed006cb
-
SHA256
1b36d57188fc74b518d6f96d56b82f9964c88d099df44c1540fe99c741c13e9c
-
SHA512
d76b1d2c86ab619aeace4de912b6740355bd42ad896f2a5d880597e8a9872231aeee321abf5967a0dd05d8e6e81aa3cafcf25d548d4d339ca6a88a687945c8ff
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W0:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d5c5a417667d771f5c9596f91690bd_JaffaCakes118
Files
-
f6d5c5a417667d771f5c9596f91690bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE