Behavioral task
behavioral1
Sample
382a623b6658176667c45cf017548cba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
382a623b6658176667c45cf017548cba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
382a623b6658176667c45cf017548cba_JaffaCakes118
-
Size
839KB
-
MD5
382a623b6658176667c45cf017548cba
-
SHA1
a4d02efebfd32286d6b555fc85f514dc935ba286
-
SHA256
9eb0bad5d55e2f6e53656993a79d4e32d6bd70b4163f0b6870b2920bb5f3beeb
-
SHA512
aa6b79bbdc5788a021f3fb38b563f69477b7f53bc272f4b72faf421afe54616fd6ae7be99332d72858c47969edf0bc13f623dfb4acd722e4ed15d8ddc382d066
-
SSDEEP
12288:Ighm8FELJ17wCpNPjIqxuuECGDUg8Zy/cLONpB6v:Ikm8eHLO7Bu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 382a623b6658176667c45cf017548cba_JaffaCakes118
Files
-
382a623b6658176667c45cf017548cba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE