Behavioral task
behavioral1
Sample
310cd7435ebc407c684995e72cd0d08e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
310cd7435ebc407c684995e72cd0d08e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
310cd7435ebc407c684995e72cd0d08e_JaffaCakes118
-
Size
434KB
-
MD5
310cd7435ebc407c684995e72cd0d08e
-
SHA1
d37edf545c8734c539b07e797e9b265ec4ce5f3d
-
SHA256
07ebf1d7c4b375d85cfefcff7ccd85d0286d2697ac4e71c44cd9ff0c311c153f
-
SHA512
e7089ef422bb0547e3b461e387268e6d473fed0416dd7fbf75e4cbf52eb007d06cc814fb54bc86dd217391727406c395278346657157a44cf65ea11b97ea8ff3
-
SSDEEP
12288:CO9zBwbcb2BIWUGvLHnXugQtlLkldhzEeYKFwSzo5FFnFXYUQwV+g:J6n5QAPJ+FoeV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310cd7435ebc407c684995e72cd0d08e_JaffaCakes118
Files
-
310cd7435ebc407c684995e72cd0d08e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE