Behavioral task
behavioral1
Sample
303e6064870a3d9d50a19aec48ade1c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
303e6064870a3d9d50a19aec48ade1c9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
303e6064870a3d9d50a19aec48ade1c9_JaffaCakes118
-
Size
137KB
-
MD5
303e6064870a3d9d50a19aec48ade1c9
-
SHA1
4d3765fc6bc122484bcc5082ae81b46e334fba28
-
SHA256
13f8aa492a3e9a0bf8fb7ab3cb8573ce62f43208d3bbca050ba79a6e1535e473
-
SHA512
2d5d032b23de6698d47fc82dccc50adcf2e696fa7cd06a2b30373d4d8fa797c5ce051ee2ee60da37ae17ce408827e288c3c5a394494e80aa79ede395aeb115ce
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wh:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 303e6064870a3d9d50a19aec48ade1c9_JaffaCakes118
Files
-
303e6064870a3d9d50a19aec48ade1c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE