Behavioral task
behavioral1
Sample
30406af50b18167f2f7101c5f42c6a3c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30406af50b18167f2f7101c5f42c6a3c_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
30406af50b18167f2f7101c5f42c6a3c_JaffaCakes118
-
Size
153KB
-
MD5
30406af50b18167f2f7101c5f42c6a3c
-
SHA1
49d3326ff3c32b5d0979c5f7fb69e4449c401972
-
SHA256
41fb043800567775f55f9f4d84a671f7991cbe12acf1d2f13a7597a11d8f596f
-
SHA512
b7f6ccb4f1eb9705d9eeb2e2ac84b580551c2df864cb28564b24ee6c0ef71b06c714ab4f437dbc90f73a1127bae618f9f47dd688951793999a6ad7b02fe6b401
-
SSDEEP
3072:oLDc5SDn5QQIa7gS+xeIBFftc9ja/CXnFpu8qAxigJf:oLoYD5Q7ar+xeIBFuI/cHq/gZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30406af50b18167f2f7101c5f42c6a3c_JaffaCakes118
Files
-
30406af50b18167f2f7101c5f42c6a3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE