Behavioral task
behavioral1
Sample
352a1595df3d487670f8eeb189234509_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
352a1595df3d487670f8eeb189234509_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
352a1595df3d487670f8eeb189234509_JaffaCakes118
-
Size
913KB
-
MD5
352a1595df3d487670f8eeb189234509
-
SHA1
fab607423da213c2ba1ff7cad0a05cc70c66a588
-
SHA256
17880c37e6806a88efed763db1cd8555b3aab94444a4f70c60ee5685b1786335
-
SHA512
2c99fff7135971e8f825980ba22b027cc05c5e0d99be3ab0e8b5224736628e3a0af016e99b3087ffc304c1cab3217fc4d13fc5b5c061c6ac0eef5a5741104401
-
SSDEEP
24576:/CKa+CZr6tT7mX4yxXTOIGtN0e78o3rHFSYst+hahSZBBc:3Cp6tW9xXTOX333rHFSDEhvBBc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 352a1595df3d487670f8eeb189234509_JaffaCakes118
Files
-
352a1595df3d487670f8eeb189234509_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.UPX1 Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 912KB - Virtual size: 929KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE