Behavioral task
behavioral1
Sample
374b18b0211167ac28083f5d488c433d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
374b18b0211167ac28083f5d488c433d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
374b18b0211167ac28083f5d488c433d_JaffaCakes118
-
Size
290KB
-
MD5
374b18b0211167ac28083f5d488c433d
-
SHA1
9787cba46fe75b51c6a224865e667b43b8305e6e
-
SHA256
424b72f531eb8cdaf2252c139c8073bfff7bd734efe074f6642d1d02bc9f7d1a
-
SHA512
8200be3f324c6827961f74d536039cc2180e21a9811ebfa1b4827753c6f519ac6e2df9e8f0d7d2e1a12ac6a525ce5606480f78817dd193885cdc4958a197181e
-
SSDEEP
6144:GZC4d3lbxc6wU/UP+XhdMRFD3LAwXRLKgoSGGS1jMNu:v4dMRU/UP4heFjLDXRLKgoS/S1jAu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374b18b0211167ac28083f5d488c433d_JaffaCakes118
Files
-
374b18b0211167ac28083f5d488c433d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE