Behavioral task
behavioral1
Sample
319fea1d9be87385f1cdb720ed745ac1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
319fea1d9be87385f1cdb720ed745ac1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319fea1d9be87385f1cdb720ed745ac1_JaffaCakes118
-
Size
11KB
-
MD5
319fea1d9be87385f1cdb720ed745ac1
-
SHA1
f9748b10bc121be66f7c0d6572d36b0972a6f81e
-
SHA256
619121657dc4dd8d3a48c509d859fdb7eaba2b26c68c517a6ebd473c9be81542
-
SHA512
9b26570e4e0907a39569333a43a2b90962bc9f80e9c9eeae1243fda9965e78d967e7ae328ec592c27b7e004ab6a27a5ed6e23b19db2df963f4edb8f22f4f05d2
-
SSDEEP
192:yQd1Gx4Qsl3LxqfW0Pk3ULeamgxT88JFsdwZERYz/BoDkUo:2x4QslUk3U1mgxTpr6yxoY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319fea1d9be87385f1cdb720ed745ac1_JaffaCakes118
Files
-
319fea1d9be87385f1cdb720ed745ac1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE