Behavioral task
behavioral1
Sample
334040dfd301a7aad65004cb73eb401e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
334040dfd301a7aad65004cb73eb401e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
334040dfd301a7aad65004cb73eb401e_JaffaCakes118
-
Size
358KB
-
MD5
334040dfd301a7aad65004cb73eb401e
-
SHA1
736ff8cd482f6ca3e8c726b41413120f4a0c6044
-
SHA256
46fabcaf8226f4d31e8c3080235ca38a7315a9e6a547732a73394d99a12ce8fc
-
SHA512
a1dce7a7cacef8218e881f843522950ff306296803e21332c4d7621ab2852a56b1dd2daaafbb15016ff818e1a639c602bf245fa96ed828908c8f4a458635e7f8
-
SSDEEP
6144:9GSzOS+yLz0GlFRsdtcvLr6VOWx2hFeSW7ofNXZ00QtFYg++zPFa48IO2JoS:9G2ZLLz0GlvsdtyFhhFeSKo1JM++zPo6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 334040dfd301a7aad65004cb73eb401e_JaffaCakes118
Files
-
334040dfd301a7aad65004cb73eb401e_JaffaCakes118.exe .ps1 windows:0 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE