Behavioral task
behavioral1
Sample
372589f58a2e0c3a69f6866fd80d1dce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
372589f58a2e0c3a69f6866fd80d1dce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
372589f58a2e0c3a69f6866fd80d1dce_JaffaCakes118
-
Size
322KB
-
MD5
372589f58a2e0c3a69f6866fd80d1dce
-
SHA1
aa1ea2578e6bcac817b5387fd3733a7b07804682
-
SHA256
409b39ff506ed027eef998e25590b50f6e0dede34622da66d9d1767df17ceeef
-
SHA512
07ce24ab51983eb80472f217bc863725ba660e76f61f17133e2f4b2086b2b8abb876c5d9b9742cc803a6cc5e4b939acc04ac92e977d6217c14ce6f918be4cf01
-
SSDEEP
6144:bKfrQycEEP6ZE8ZzJmiiSoTZwZn2bn610ZgSvW6uC3TYvcrc99U/Z635DUF:5RTS68mnZHjaUvQCsvcU48NUF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 372589f58a2e0c3a69f6866fd80d1dce_JaffaCakes118
Files
-
372589f58a2e0c3a69f6866fd80d1dce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA