Behavioral task
behavioral1
Sample
365f443d500086dfa67e3e1bba0a54be_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
365f443d500086dfa67e3e1bba0a54be_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
365f443d500086dfa67e3e1bba0a54be_JaffaCakes118
-
Size
267KB
-
MD5
365f443d500086dfa67e3e1bba0a54be
-
SHA1
491fc03f10f9e192a2f3fa38a316f6dd636a8334
-
SHA256
bb96af2d17b9be0cbbcc7f5475429b6d1eb2564a39d47ecdec68cd6d102d6bb1
-
SHA512
52ac5cbd62700fb7099d3039f10a445f6f8fc9df85645065a814fb6cf2467c13f7790a5acaa14a769f19ce07fd8082c5ea0efb132fc2b5dcabc7ef0988d9fff3
-
SSDEEP
6144:33SyRkWgn8hlEi2Xv9d+qH2/3lTMtV0JumKJ4e7x5iVfwLZ:HQWphfOvD346tV0J/KJ4jZa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 365f443d500086dfa67e3e1bba0a54be_JaffaCakes118
Files
-
365f443d500086dfa67e3e1bba0a54be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE