Behavioral task
behavioral1
Sample
1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118
-
Size
38KB
-
MD5
1b4d39edd5a219a34c5931dd45503af6
-
SHA1
b52188ade34de59cc8e95e970b54612ae4db40df
-
SHA256
36dbb5e353ba47a7398ea10ecec0e4ece6f2427177f6b65c5f91540e3305df7c
-
SHA512
9a4fdbfc18a5e3d0c286372409594f695de729533640926158ce281f8fc7e87e652fc2373c97c4d9a7c1865d992e9d43cc81eac76bb13d179f87e3d5e180a086
-
SSDEEP
768:pwVrZO8K0vagHUX/nyL6pgbCn84yuRxzaUE9cK1IkQYp:pwtZOaHHE0Cn84yiJLEuqIkQYp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118
Files
-
1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnsnvjd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE