Behavioral task
behavioral1
Sample
06a0e4181e5c80161f1a14641b50bd80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06a0e4181e5c80161f1a14641b50bd80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06a0e4181e5c80161f1a14641b50bd80_JaffaCakes118
-
Size
24KB
-
MD5
06a0e4181e5c80161f1a14641b50bd80
-
SHA1
335c03acf5078c7ad40c05d8a6c2019e0b1d482c
-
SHA256
b586445db0db268a6e1b3282f3e5f9efa0d8a604a9ae9f0acd161543b68ba16a
-
SHA512
9548a94f6d46a177547715b23e373dfb01bfc18ff7c5c1327713488fe484a4ddde4beb3aac3ad1c22e84d3d3a377668387a53b8c31e81e36d99224e8c9e6a1c2
-
SSDEEP
384:dFozeeE6zasHrWZSGLyN4QlrV9VfdtM2lzVMC5mbs8btIXBzxp5LgulVXP3:AzeLjsLxdlrPdMuhgbhA1Rk+Rf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a0e4181e5c80161f1a14641b50bd80_JaffaCakes118
Files
-
06a0e4181e5c80161f1a14641b50bd80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 12.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 581KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE