Behavioral task
behavioral1
Sample
311705281edebb93add5fe31720dba1e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
311705281edebb93add5fe31720dba1e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
311705281edebb93add5fe31720dba1e_JaffaCakes118
-
Size
59KB
-
MD5
311705281edebb93add5fe31720dba1e
-
SHA1
2686ecd6fdccdd36fd0367656530da84f85a682b
-
SHA256
15b41e7c5c0d2a1cee2b8314076643f7e01a4fc9e5ac00725b6fb78eb267330f
-
SHA512
203eb7951594b0fbe0afbe96c798edafcafd257165e9cec81a11799c635936ad1eccbc6c2f9caba078b370b27d9c84bef1d33ed95f7295c1a2fdb986071df665
-
SSDEEP
1536:0ZYV/J5sIST/ydKWNDwlG9HjuvtGF7o8B+ggLb6yHYA:r1sFTkLhwlwHjEGK8B+PCw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 311705281edebb93add5fe31720dba1e_JaffaCakes118
Files
-
311705281edebb93add5fe31720dba1e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 217KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE