Behavioral task
behavioral1
Sample
564dca8be67be23421f9b4c629897cc1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
564dca8be67be23421f9b4c629897cc1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
564dca8be67be23421f9b4c629897cc1_JaffaCakes118
-
Size
17KB
-
MD5
564dca8be67be23421f9b4c629897cc1
-
SHA1
a860a88eb0aa3196d5d3e2dfa02237bf72cc1aa9
-
SHA256
a64ca97e608d48ab88848a67d6d4f75e68f5f50b4e14dec4cb64127197c99a69
-
SHA512
bca05c9e1aa4befe3734b001143e973d063bee5105e2cc1b8cb113310e5b9128b35c7be2b77dac5e7411f392a59137d7bc66ed0216049be2edaabfba25ac101b
-
SSDEEP
384:8PiczdmEYNjHG6jfnjYePiFyoaQRgi9QxMy4sk4mdq:+iczgDNjHG6jfnj5iFy+RggQxOP4mdq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 564dca8be67be23421f9b4c629897cc1_JaffaCakes118
Files
-
564dca8be67be23421f9b4c629897cc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE