Behavioral task
behavioral1
Sample
370be6218f359cc831181daaea205cd3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
370be6218f359cc831181daaea205cd3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
370be6218f359cc831181daaea205cd3_JaffaCakes118
-
Size
2.1MB
-
MD5
370be6218f359cc831181daaea205cd3
-
SHA1
78351353b332337a90da554f0c0e8499c3d1bd48
-
SHA256
56725269bb3e4d502130375e5dc1da31960237d51e2e0557cc97bb4c3d029d86
-
SHA512
404b32d0ef83e23952179fba57374ceb9cb4386b982a0b544d99d5386e534d1b375e66ef80055dc59e00574d5f75eeefae5528eb5b3a29c7ab8c4b686266638f
-
SSDEEP
49152:57Wqif/sfTyXnwwQyYs7BE3Dftr3R5WzdWksQwPJ7zjSh:mnwCtETfdB56dWkwPY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 370be6218f359cc831181daaea205cd3_JaffaCakes118
Files
-
370be6218f359cc831181daaea205cd3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE