Behavioral task
behavioral1
Sample
37658744fb4b1c1bbdfeae634e48c450_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37658744fb4b1c1bbdfeae634e48c450_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37658744fb4b1c1bbdfeae634e48c450_JaffaCakes118
-
Size
946KB
-
MD5
37658744fb4b1c1bbdfeae634e48c450
-
SHA1
00462c1b846e6296a75e30c817e89a3feb85ac9e
-
SHA256
d922f787a3af077ba97b7b2d881d70162d3b466fbeedea4a8daa976f92babbca
-
SHA512
f8c169cc8b8c451f5695b598b8112ca8fc7802c0d40f879bc7940682d3297fdc78179eba7b879b0e22c2a1c0fa13d381296c670363ed30bea23c9e35f77fccf2
-
SSDEEP
24576:2b+OPzDv+24SAUqnXxCaj3ps9FYoodZJeib0QfhNsNOf:a+OPf+AZ8XJp4HqZ0Ghtf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37658744fb4b1c1bbdfeae634e48c450_JaffaCakes118
Files
-
37658744fb4b1c1bbdfeae634e48c450_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE