Behavioral task
behavioral1
Sample
33842242a8da3eba4cf7c31be43c7d59_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
33842242a8da3eba4cf7c31be43c7d59_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33842242a8da3eba4cf7c31be43c7d59_JaffaCakes118
-
Size
88KB
-
MD5
33842242a8da3eba4cf7c31be43c7d59
-
SHA1
04f86738e90471ee9b83639c2f63682979020fcc
-
SHA256
320329bab8020241d61cc311730bcc4422bd5ab18c35d618425ca30182b15259
-
SHA512
5704e56ae033bd7297c7e7eae0001e35bd594175f1cc4281b94d46d1def976df8aeebc989fb9164bf33276059d178c861c69358c4ac8fa66b1bc87c14ff5ad4a
-
SSDEEP
1536:fU1XvG66cPM5bK7XftMM5NdmdwtXF480uGCfWGYnDOARQKVaT+zx1iF0xhGfng5g:s1fdg2hQhaizfDs4RkdKns9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33842242a8da3eba4cf7c31be43c7d59_JaffaCakes118
Files
-
33842242a8da3eba4cf7c31be43c7d59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE