Behavioral task
behavioral1
Sample
33b841151719bfb36e1bebf5dd36f5ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33b841151719bfb36e1bebf5dd36f5ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
33b841151719bfb36e1bebf5dd36f5ce_JaffaCakes118
-
Size
159KB
-
MD5
33b841151719bfb36e1bebf5dd36f5ce
-
SHA1
e70820669f605f80ece685b2354520c037c3a8a8
-
SHA256
009915c25ced210bf6f0bbb120afc745fd570374bd8f6e15b119c858e6dde4f2
-
SHA512
06711107452ebf21138758a8b1e9ea3deb538047df2bb361c67430685d36151205aae53b747da46ea4bb0350bf0d5b9a424b528b2edbc5d408076e00d7c77227
-
SSDEEP
384:N4dHrFDVtQPRtShFZlWu1O8ESYRtnhS5zDYBkTLZgvo1w9DpWmtnylTbfETiskL:qdHhDsylx3mheZavJ0QnqMeskL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b841151719bfb36e1bebf5dd36f5ce_JaffaCakes118
Files
-
33b841151719bfb36e1bebf5dd36f5ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE