Behavioral task
behavioral1
Sample
358389931d44fee8d3dd1c28e463d53e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
358389931d44fee8d3dd1c28e463d53e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
358389931d44fee8d3dd1c28e463d53e_JaffaCakes118
-
Size
217KB
-
MD5
358389931d44fee8d3dd1c28e463d53e
-
SHA1
f749133a23d0e8663882223c209d5b7d9272d8fe
-
SHA256
ce79dd219100b0bef0c06671faf4f9c0445ae83f45a629472e368f80bd00ae62
-
SHA512
dc63ecd2325de3692bd8ce5a5d6cd69f8673d4b8a8f456ff0be628aa490187977754463d9985553cb1dfad3b10c5f83e4d48ed2b0100a7bdc6b697579fa827be
-
SSDEEP
6144:uqe7zo9EdKJPLkO0K0VbVwbcbfAHvhM/dWPfeahS:de7s9E8JPwHLpVwfqdW3eQS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 358389931d44fee8d3dd1c28e463d53e_JaffaCakes118
Files
-
358389931d44fee8d3dd1c28e463d53e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 548KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE