Behavioral task
behavioral1
Sample
30c9ee6e4da2d5e9c6cfca21579e6d23_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30c9ee6e4da2d5e9c6cfca21579e6d23_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30c9ee6e4da2d5e9c6cfca21579e6d23_JaffaCakes118
-
Size
206KB
-
MD5
30c9ee6e4da2d5e9c6cfca21579e6d23
-
SHA1
39d28ac6638d0a503a09b0716bf5e18af9fd43cf
-
SHA256
c1bb65e360124c0d7e248f9ea735daec1b41c6cf708132e1eccd1e7156aef7d0
-
SHA512
9ee190d777eedf69d92865cc8d6e427cda2159166afceca4440d7f16261f8d08c2340693117cd378f25e27855f28c53aba2d20e6739feb87de6fbc5916c122fb
-
SSDEEP
3072:b7cWb4out+lgyG1NddeO/8v5R826/YZWvaW1UYUMOQMsGHt8e8Mm2R/75/qY2QrE:bFcoS+lgyGY8FAxt8e1tIsKMuV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30c9ee6e4da2d5e9c6cfca21579e6d23_JaffaCakes118
Files
-
30c9ee6e4da2d5e9c6cfca21579e6d23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE