Behavioral task
behavioral1
Sample
316354c7bb5f0d6551c22b6433cb1d45_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
316354c7bb5f0d6551c22b6433cb1d45_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
316354c7bb5f0d6551c22b6433cb1d45_JaffaCakes118
-
Size
139KB
-
MD5
316354c7bb5f0d6551c22b6433cb1d45
-
SHA1
89efc48ce549c183942c8695919a876ab5b716e2
-
SHA256
584a8b667d7f56922b845032abf7e287f6893558c74f492afe23a554eb43fe5c
-
SHA512
9dbb384e34e44933f941097dea3869b5971b75b09f692cfec2b8717bf7ea0fb75cbde4347fc71b467c5b9bd096fee8d0439d4c82466ee321d7ea60d63f5d1971
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 316354c7bb5f0d6551c22b6433cb1d45_JaffaCakes118
Files
-
316354c7bb5f0d6551c22b6433cb1d45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE