Behavioral task
behavioral1
Sample
0683259658f9b6344cdc55bb817a307f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0683259658f9b6344cdc55bb817a307f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0683259658f9b6344cdc55bb817a307f_JaffaCakes118
-
Size
136KB
-
MD5
0683259658f9b6344cdc55bb817a307f
-
SHA1
92336127feabbc4d574d3dda5d6a5b61dc99a3af
-
SHA256
b29014c24eef6c5b9b5847d3c5550a609b7704d2a32432143a2eaad826ce3f83
-
SHA512
0f10e22271a65a4065cf7406c6883ada85274a9b3dba84a402f6abb49e4d7667fa9cbeab3e1a88c690177adbc8645bef71420117622be7bb8d53d5fff72a1598
-
SSDEEP
3072:dpCU3Em6D/RhXdxV8TNKNRczVA1R0fcdrD0l/Jybf6/jj:VEm+fXLV8xrWRPdrDu8O/jj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0683259658f9b6344cdc55bb817a307f_JaffaCakes118
Files
-
0683259658f9b6344cdc55bb817a307f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 521KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE