Behavioral task
behavioral1
Sample
368920121a372a543c719faf708f4bc0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
368920121a372a543c719faf708f4bc0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
368920121a372a543c719faf708f4bc0_JaffaCakes118
-
Size
323KB
-
MD5
368920121a372a543c719faf708f4bc0
-
SHA1
ae2bb905ad32ba38924d569beb1adaa44e544239
-
SHA256
58710032f4acdd7a9a23b952f9091a417e7d94c00fbcc27f39c869a57f150907
-
SHA512
743e35f581581e95aea732fd0329c3f77e127c0a6b3d410dfdbc9ce5a587d7272a006322886dad15dd6f0b4aa97e9625a94ceb3057dfcddd09ec1ca15be320e3
-
SSDEEP
6144:qtXBuOrXaR0v4WI/uoyJxLwCXoxTYwZwRvkmnSu1Q6UaPrd1oSn:sXEOrXaRBN/utpwUoxTZgvdnR6SjoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368920121a372a543c719faf708f4bc0_JaffaCakes118
Files
-
368920121a372a543c719faf708f4bc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE