Behavioral task
behavioral1
Sample
304f17a96039e61362155031cbb64244_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
304f17a96039e61362155031cbb64244_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
304f17a96039e61362155031cbb64244_JaffaCakes118
-
Size
57KB
-
MD5
304f17a96039e61362155031cbb64244
-
SHA1
ff64bb4d3db0ce7e6183f0f73c5012dbf9220574
-
SHA256
178ad46ac357753f81c79bb9b7a9b715550569964cce2f697abb69aac857e337
-
SHA512
cedec0258b2f7e420cf297455a676e926f80d8df6f54c530fbabc1631ca92847e40142a99e73dc5dba574aadd717339e279d205578f4d18b37e68eb6e8f80cff
-
SSDEEP
768:1N8AxVm91xBPevhfQJGtizVEH2kCkOJ/2EeiUN97tY2/:1L0v8vCotipEH2WWSjN/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304f17a96039e61362155031cbb64244_JaffaCakes118
Files
-
304f17a96039e61362155031cbb64244_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE