Behavioral task
behavioral1
Sample
37a4fb59dd891d320d9acfeaa47e001d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37a4fb59dd891d320d9acfeaa47e001d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37a4fb59dd891d320d9acfeaa47e001d_JaffaCakes118
-
Size
326KB
-
MD5
37a4fb59dd891d320d9acfeaa47e001d
-
SHA1
e42bf9c08f1c927b7563435634cc9771ca65956b
-
SHA256
367c7363c7f96f3b0d3fa019f44ec1f51417119aea5fd26f3dcfe45cdaf2b165
-
SHA512
dd0a457567b34a4c32d8d7e6d59088c2524aad479190428d43ee560bd3f4f44b7dae2c92b363f70c37cd18eb2efc4a78183a6fee19a5e9986ae9697bd9129b0b
-
SSDEEP
6144:HMOajWf/ihWwJwzGoZwcZwpopqdM0WzPJ4ONA+9roRHBEsQ9Qh9W5sao7N+mu:TaA/ihNuz5wR0qdM0WzvNr9o/EsQh5zl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a4fb59dd891d320d9acfeaa47e001d_JaffaCakes118
Files
-
37a4fb59dd891d320d9acfeaa47e001d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 322KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE