Behavioral task
behavioral1
Sample
319ee268f82665423d1d2baf75470a6f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
319ee268f82665423d1d2baf75470a6f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319ee268f82665423d1d2baf75470a6f_JaffaCakes118
-
Size
334KB
-
MD5
319ee268f82665423d1d2baf75470a6f
-
SHA1
b4273f001a882df1c3d386c19ef92f49a5cca7cc
-
SHA256
95e020010ee6017ab93fff3c9e5328180aff839ade084882d26bb4d66f7ac3ae
-
SHA512
3d240624e42337bf7fb069328a28658a193b1efcecc3bf0cd6d772809f24404801c4139bbe4d619a8ad9c043d991499ec0eca1a84a9ea7739347670fd2f669e9
-
SSDEEP
6144:FZLoudZzFE0jvxBpKWZ0RgII+7Nfr4KxVvvEKkY5H/dagjNQpNDgbgQy1rqmMa:FptzW4xmWZ0vV7NTpVkK9H/dagjNyDgW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319ee268f82665423d1d2baf75470a6f_JaffaCakes118
Files
-
319ee268f82665423d1d2baf75470a6f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE