3stIhgB4n@24
Behavioral task
behavioral1
Sample
063f3de51710195c2fdb2ee6acc3ab95_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
063f3de51710195c2fdb2ee6acc3ab95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
063f3de51710195c2fdb2ee6acc3ab95_JaffaCakes118
-
Size
328KB
-
MD5
063f3de51710195c2fdb2ee6acc3ab95
-
SHA1
67a5be1ebe2cee7d32711bbaac53ae3c0181bc1c
-
SHA256
7b53178909fa7e37ed75528295c34959ed63a0b488084ca0d0b5ec6062491a2d
-
SHA512
084da749d17b5079ec782b14eb635358b7936f88ee775caae0aaa3c9df99a45eae161fd9a63544912503e1d5afc96113cfe616a114622393b018ccca089cc1f2
-
SSDEEP
3072:vwyFcFbEyEDgHFG1TvPsxgXgouPoEXoMmmRViMDoutHvSK4RONz:vsFbE7glG1TvPNQv5XXfoS6Ky
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063f3de51710195c2fdb2ee6acc3ab95_JaffaCakes118
Files
-
063f3de51710195c2fdb2ee6acc3ab95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE