Behavioral task
behavioral1
Sample
264f54e061b4691fa3d1675e7b670202_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
264f54e061b4691fa3d1675e7b670202_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
264f54e061b4691fa3d1675e7b670202_JaffaCakes118
-
Size
137KB
-
MD5
264f54e061b4691fa3d1675e7b670202
-
SHA1
8e6e44f910b19258404734c5f87658d2ba7a287a
-
SHA256
701a3ce160c1671f66c9e42cac86b55e5013fee305462cc54375121c47500fa9
-
SHA512
8115bfe150bcd8be1e310023f0e61e2d08abc04bf7ba4fd643579e48ee2725a7d324797aa0dfac52d344c9ee11a08cc1a0e42bf5748e7b2e4d0ee65bce1cb4ef
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WZ:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264f54e061b4691fa3d1675e7b670202_JaffaCakes118
Files
-
264f54e061b4691fa3d1675e7b670202_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE