Behavioral task
behavioral1
Sample
376eb2f3f6e268076e3000e462c07d99_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
376eb2f3f6e268076e3000e462c07d99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
376eb2f3f6e268076e3000e462c07d99_JaffaCakes118
-
Size
249KB
-
MD5
376eb2f3f6e268076e3000e462c07d99
-
SHA1
9ec282d45f199d62fda6d37adeef29d28003f8cd
-
SHA256
1c8ed5416d8ff86ccd94e64ef85f6c3ee0d4679f5858595d37448cf8b286f2ed
-
SHA512
b38acf5a14c82eabdb6d6d40f3b0e05acf16022482e329d5ae8b84ebff683521bc3feb92f056b460da70b76a2bd5fdc631545029d1bf122844ebfe0e7e815a83
-
SSDEEP
6144:viRLyjwVG3o4wLtK1KGXGI+VkU8mfNEzG+cZvviiewnLvM:kFGNXRukDeNEXcZ3bQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376eb2f3f6e268076e3000e462c07d99_JaffaCakes118
Files
-
376eb2f3f6e268076e3000e462c07d99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE