Behavioral task
behavioral1
Sample
376c7c9ccd895ad0f348212af885fa27_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
376c7c9ccd895ad0f348212af885fa27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
376c7c9ccd895ad0f348212af885fa27_JaffaCakes118
-
Size
2KB
-
MD5
376c7c9ccd895ad0f348212af885fa27
-
SHA1
60910fca24e264892863e46dd2a8a52e6f7ece24
-
SHA256
96b5b0d807b1244db16f72e1eed19da4b9ff315b290e187f46ccdf40d7cef3fe
-
SHA512
10b15d6aa3b7e124d89ea889529ba90b8e3c8a54a7987f3b3c7a6f8acd6627c864d600bd887f0d1ca13ca613b3d16c8e8131232a5501efef1ae48db3abe855ce
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376c7c9ccd895ad0f348212af885fa27_JaffaCakes118
Files
-
376c7c9ccd895ad0f348212af885fa27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE