Behavioral task
behavioral1
Sample
314f5d18df87ca466ea3c527b7ad4604_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
314f5d18df87ca466ea3c527b7ad4604_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
314f5d18df87ca466ea3c527b7ad4604_JaffaCakes118
-
Size
1.3MB
-
MD5
314f5d18df87ca466ea3c527b7ad4604
-
SHA1
be939702cf35a0a4d44e6665e0098fe9b2da5f12
-
SHA256
1a6c05a75b67c27af27623a735eaeb5aef764273a9fac8147f91bc44144622ff
-
SHA512
09e45138be2505fded3e7a46d25773b2ed2b4440d653ed61c2d089b1a3245c63b085fe7dac4db722aaa3c1939dd63be2a86a103488457aeab369f580b83d425c
-
SSDEEP
24576:t3+Xw77n0ktBLpQa47j1n/ELpi0tBjzTBAcZO75WQIhj7I+JoxRyiO:t34e7Tea47j1n/sF7WAO75WQIhjnJoB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 314f5d18df87ca466ea3c527b7ad4604_JaffaCakes118
Files
-
314f5d18df87ca466ea3c527b7ad4604_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE