Behavioral task
behavioral1
Sample
30207170c57fa4e4d8e6dddf3c0d9c1c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30207170c57fa4e4d8e6dddf3c0d9c1c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30207170c57fa4e4d8e6dddf3c0d9c1c_JaffaCakes118
-
Size
79KB
-
MD5
30207170c57fa4e4d8e6dddf3c0d9c1c
-
SHA1
e956255834af4de9a594a1ba0da114a607950d6c
-
SHA256
32b01643e00f7379c0e15312d1f1e4f7f06830666923f69b5c7626fc51aff481
-
SHA512
d6ceb17cf791bc80175b94049c04d5057e1e3948f8626b58f55294646ab245e8d7b840fbd39c6f12dca6fa9bd43297f12eef27afefc412e90a16aebce5e81a37
-
SSDEEP
1536:6bPB+UVdZ14llzlcRaNjYmqxSzkyhm9Yxi5uN5Ztmi3Hh6zCP7lVnecyCwc9ED8V:+PFiXC8tzc6rBlYq7P/gc6DA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30207170c57fa4e4d8e6dddf3c0d9c1c_JaffaCakes118
Files
-
30207170c57fa4e4d8e6dddf3c0d9c1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE