Behavioral task
behavioral1
Sample
347a989b0187644580ef784ad8064dc9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
347a989b0187644580ef784ad8064dc9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
347a989b0187644580ef784ad8064dc9_JaffaCakes118
-
Size
137KB
-
MD5
347a989b0187644580ef784ad8064dc9
-
SHA1
57dac5fab3fb220fe8aef59a4e76df197c6fd201
-
SHA256
45493fc4b5797b06b2151355116b5666aebd2ae7ce43c0d7a03eb6d95de10f92
-
SHA512
2fc03cf521c6a991d267c12d98a874cfe4040581f4070bc13b246f635fa6904a3f2be712b5a8fc7245a0624bc62d4de9050844e36494d82eae2ce21e92044dd0
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wl:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 347a989b0187644580ef784ad8064dc9_JaffaCakes118
Files
-
347a989b0187644580ef784ad8064dc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE