Behavioral task
behavioral1
Sample
31f6b7108f84631aaa2c0ea3f912702d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31f6b7108f84631aaa2c0ea3f912702d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31f6b7108f84631aaa2c0ea3f912702d_JaffaCakes118
-
Size
330KB
-
MD5
31f6b7108f84631aaa2c0ea3f912702d
-
SHA1
763130ec890144711c9f47e503a85f766ad5c775
-
SHA256
faefc26db1f8f86ef41bf7d4351c921aa35e12b589f4ed810b17dd7c7b915c0b
-
SHA512
8008d52e4e0073274aa54da79d21fdc4def31c1394b231c892e1066f11c8a47d386ce749247f65b62578798cca23e5a138ab29e9863935bb4f1ad51166b73f4b
-
SSDEEP
6144:Q4uQTFFYtJ0hDYRLqLxNWyv7PuTv/gb09JoUV4eFeAWpoxu4:QhYFY0iR2NrjPu74bgJoUV4eFeBo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31f6b7108f84631aaa2c0ea3f912702d_JaffaCakes118
Files
-
31f6b7108f84631aaa2c0ea3f912702d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 888KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE