Behavioral task
behavioral1
Sample
30fe0024b4b1f9b6993b754df1e41708_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30fe0024b4b1f9b6993b754df1e41708_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30fe0024b4b1f9b6993b754df1e41708_JaffaCakes118
-
Size
24KB
-
MD5
30fe0024b4b1f9b6993b754df1e41708
-
SHA1
1f1e6490637b19d4497a951ea89d4e19af9e7563
-
SHA256
981484577eec165b2ed71fd816459bff1cb3cb94956de11d763f2f86e7a80f5e
-
SHA512
2e76f8e2ca44841a4a6764447eabb62b0690681e3b808e85460928b0f131916fdc480a885cb4544d3c0809f950fcbf85f7208b6949d123d75bb7c82b03897c9c
-
SSDEEP
192:WvHniGP6/V1aL3wcVFv8m/gUb49AanDKH6JuI6VHZurMm:qtPDrFvzgUbQAaOHav
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fe0024b4b1f9b6993b754df1e41708_JaffaCakes118
Files
-
30fe0024b4b1f9b6993b754df1e41708_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE