Behavioral task
behavioral1
Sample
08436098275428791c52f03fe2a6b8e9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08436098275428791c52f03fe2a6b8e9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
08436098275428791c52f03fe2a6b8e9_JaffaCakes118
-
Size
165KB
-
MD5
08436098275428791c52f03fe2a6b8e9
-
SHA1
1cef110610a6c17cbc1eb3bcfc03b93a04a8b5eb
-
SHA256
3cff8b72349a0bfb9781d68178c9542cbf11612203b03e03fff81c7c5211537a
-
SHA512
d8f012859009df438b077b610b408ed5869e154f4dc61638904c86c4d8f4ebf056df75dd7aa8e10dccee499b9410ee31c9698dc0993e3b635171285e5cff5c6f
-
SSDEEP
3072:SfqKqf6l6PuEJqmNun/LrC70p+dLQU70HjPyI4jdEFfaU/ZHn6no:8Uf6l6nJzuzrC70oLQI0LyI4j6FCU/Zv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08436098275428791c52f03fe2a6b8e9_JaffaCakes118
Files
-
08436098275428791c52f03fe2a6b8e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE