Behavioral task
behavioral1
Sample
37f08555b43a0ff0f6450c1852c9a6e6_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37f08555b43a0ff0f6450c1852c9a6e6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f08555b43a0ff0f6450c1852c9a6e6_JaffaCakes118
-
Size
6KB
-
MD5
37f08555b43a0ff0f6450c1852c9a6e6
-
SHA1
3b7e85031fcedf09ac3648e9595afed92100a519
-
SHA256
48a2d295a506fdcbf622b7e8d58791160c1c7a282174db0dab02f2f9ae39e0ff
-
SHA512
2ff112171124cce5c6b17b3df3d500d3a91402a1d00619b6b0e009cb9111da4c8df9436ce43dd4767497c21d9a403a18c8b4b796385af96e4e7dd981bba4cffe
-
SSDEEP
192:0DE03mYOt1rhtN1M38Cp8XzMKQynAFEwF54c4kXt:CE0m91rTHo8x7Qyn7u54c4ut
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f08555b43a0ff0f6450c1852c9a6e6_JaffaCakes118
Files
-
37f08555b43a0ff0f6450c1852c9a6e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE