Behavioral task
behavioral1
Sample
30750ce1c1840a517d88f8ecd636dcdd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30750ce1c1840a517d88f8ecd636dcdd_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30750ce1c1840a517d88f8ecd636dcdd_JaffaCakes118
-
Size
266KB
-
MD5
30750ce1c1840a517d88f8ecd636dcdd
-
SHA1
047da31210c1f47bce0fc39cbfeb2066c6caf9d9
-
SHA256
3ff6fe3121ebe8bb7652d207e218319a56563126c3bb24543ea7ceae6758f122
-
SHA512
8208370c57bc12c5fa9eff8a5d9bf91bed4b22bfc2e5c270862dae90c2222ef4fa2276d1c25afe2086bbb2ee070ff529db1246c63a8d29d1e6eaf0b845e3b750
-
SSDEEP
3072:i8XHcmlXFvN/sD4iwl7S25Nbbcqn7gnq+vIYk7vNPq7mSO8lL80ptk05dA7785GO:i8siveKNXn+6ZL07FJHk9AE6fHPEQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30750ce1c1840a517d88f8ecd636dcdd_JaffaCakes118
Files
-
30750ce1c1840a517d88f8ecd636dcdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE