Behavioral task
behavioral1
Sample
329a1e985e507bd95f36ec837d9f76e8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
329a1e985e507bd95f36ec837d9f76e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
329a1e985e507bd95f36ec837d9f76e8_JaffaCakes118
-
Size
148KB
-
MD5
329a1e985e507bd95f36ec837d9f76e8
-
SHA1
1198d6fb66eaba6fab708eea28e5fd90f9d5a505
-
SHA256
845ab17f249eacc8fbc4c6c2489da0fd2270290c35b21c65b00bd186ec4b8b31
-
SHA512
760d19658a65b35ed3dd59272909c24f02bde1a4fc3b584a235fd3f40a27c9320a457c5bd1e428ce1e8d8bdc5ea03fc66156bf0e65b7a8e7249fc82c71ad55de
-
SSDEEP
3072:82VgzWcvYNFAOZNDBK00c6nDfnMXqg+4CZPIrEDSxDqeJie3SoutPx:16Q3AOZJ400c6n78qvHD2v3SoS5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329a1e985e507bd95f36ec837d9f76e8_JaffaCakes118
Files
-
329a1e985e507bd95f36ec837d9f76e8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE