Behavioral task
behavioral1
Sample
3400aa983ed609307ff9e477cee54355_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3400aa983ed609307ff9e477cee54355_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3400aa983ed609307ff9e477cee54355_JaffaCakes118
-
Size
21KB
-
MD5
3400aa983ed609307ff9e477cee54355
-
SHA1
c6ea7e834f92e6fed6a0651ba0903d054d02794a
-
SHA256
243dd0e1e7e0bdeacefd91f4baecb96a29a67e7a307dcfdc6ccbaf7f9d045fc3
-
SHA512
be93e8e357c17ca325365764eb4f75f284874e4e7ad5d90781ba87f07b42b785f614c86356614a90a4346a7a7ebc5e44d55164d67d3b4e39d3067ecaf6670801
-
SSDEEP
384:RIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZ00QaNJawcudO:RRGuY2P0Vo6r7SiAwyrMRjbz5nbcuyDY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3400aa983ed609307ff9e477cee54355_JaffaCakes118
Files
-
3400aa983ed609307ff9e477cee54355_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE