Behavioral task
behavioral1
Sample
31e3ad934b5bc724b809eeb159c4e145_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31e3ad934b5bc724b809eeb159c4e145_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31e3ad934b5bc724b809eeb159c4e145_JaffaCakes118
-
Size
19KB
-
MD5
31e3ad934b5bc724b809eeb159c4e145
-
SHA1
94f8ac054183b6515719d809cc061d0edede0d00
-
SHA256
c278c83f680b2ea1a7c787863dbfb26e941fbe6ad19044955ab860871622b76f
-
SHA512
122c7e547763a53ce28a0fc7be746eaf1a11c2bbadc4f045db8eb972a505b1574444c6c5f90ee3ec8c1284831e789a28fc0742f569262afd59e2a296de0c6e3b
-
SSDEEP
384:FuTvBGv+wpAGmnGXUlRXTAfpevmeA404CqmOZ1KT80+qPtPsNLx8+li:Q0+wpAGKefp4mKCq7ZnxNU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e3ad934b5bc724b809eeb159c4e145_JaffaCakes118
Files
-
31e3ad934b5bc724b809eeb159c4e145_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE