Behavioral task
behavioral1
Sample
34cc9778ec8b5579fef6ab89afbcbc51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34cc9778ec8b5579fef6ab89afbcbc51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34cc9778ec8b5579fef6ab89afbcbc51_JaffaCakes118
-
Size
12KB
-
MD5
34cc9778ec8b5579fef6ab89afbcbc51
-
SHA1
70f6397eb4656d6d5f4d3b518d1efb7f4a8559ec
-
SHA256
d3374e9970270b2b9dbfe0d0b49bcfbf0b9616a340187161e3e0ac408fb40a03
-
SHA512
9c7d4b16bc2203d1163c59563c1f680143babccf0fba188d6adab18d16e5ec6ba0a96f58f1df13705cca78b7231f912d3b83e572085aa80f255afca7212965a9
-
SSDEEP
192:neQX8sqllivJ9Lq46hrw5gB9RAkuFhqM6AuEmgY/VVE9RKZDLqn7:eQX8R7ivJ9e46hS0HTUIemgY9mEo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34cc9778ec8b5579fef6ab89afbcbc51_JaffaCakes118
Files
-
34cc9778ec8b5579fef6ab89afbcbc51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 504KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE