Behavioral task
behavioral1
Sample
37f7d68097ac6b9d701de5905a8da899_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37f7d68097ac6b9d701de5905a8da899_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f7d68097ac6b9d701de5905a8da899_JaffaCakes118
-
Size
854KB
-
MD5
37f7d68097ac6b9d701de5905a8da899
-
SHA1
a04450dc93a209df7962713bbf528a046ed01f08
-
SHA256
92b93d5e516f2fd05ac124963975192f31a250c59f04fa755894662f2c3148fc
-
SHA512
59fc9a788862067e1f1cdf7a98d586a397a7d2fc7eed2503e522981df573f1008f5609ec3c8e18681fa181b6a9bce2fa6179d578751c3df54fe9c55fedd1ae1f
-
SSDEEP
12288:FRWbCt0ls/9AOoZ5Exe+76r1W9m2/EGb5Li6PsHbTl432+D/9gtgcSFneVmTtm7V:WOZ76xx2/TLLgJ4F9g+cMeVmTtmgUUS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f7d68097ac6b9d701de5905a8da899_JaffaCakes118
Files
-
37f7d68097ac6b9d701de5905a8da899_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 843KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE