Behavioral task
behavioral1
Sample
35d2999cb1970d4efbb863fe307f37d8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35d2999cb1970d4efbb863fe307f37d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35d2999cb1970d4efbb863fe307f37d8_JaffaCakes118
-
Size
387KB
-
MD5
35d2999cb1970d4efbb863fe307f37d8
-
SHA1
ff940d91dce429395efb31e242e632c56ba53679
-
SHA256
1bf1f26c6ad0733ae94dcd0ecd73d8f014557c813fd4a7b5ef7e68a506d5619a
-
SHA512
43bb7ca5290899a67d5af14691fe309378e14d0d2e72f1a37708de37c043d85bca0f81c8482325a2b3ae71beb24602c9c976c57c7ef2f3389a5c49cb34ff4d14
-
SSDEEP
6144:5KcuaRkHckUjqRYYDEvchaMl8wFYNWSDefEh5ViEovOaerEiJ483KCaomNKuMEI:JkdUjg9D9d8wauci1DZiJ4Kcx7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35d2999cb1970d4efbb863fe307f37d8_JaffaCakes118
Files
-
35d2999cb1970d4efbb863fe307f37d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 356KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE