Behavioral task
behavioral1
Sample
38562e09ae943cdb13d350d183d93649_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38562e09ae943cdb13d350d183d93649_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38562e09ae943cdb13d350d183d93649_JaffaCakes118
-
Size
3.1MB
-
MD5
38562e09ae943cdb13d350d183d93649
-
SHA1
bbc4d07d8e029999c4c2c86954eae83e2a388526
-
SHA256
ef8e5b522b9e5ce79650f54a3fe307d978b290d8d19921ec74b12f6a8998605f
-
SHA512
5f88329d9980b4ad19bddce3ba45d0b25466318f91d66f0ee3ed33e35b4eb1f4a972afb05918679f3d873e80d351dc339a7b88f0408b5bacadb6755388ef3a97
-
SSDEEP
98304:sI1kLDRRBTwbnMUMXVw+nl2capREDWrvyqUigtS:I9wQV723xv7IS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38562e09ae943cdb13d350d183d93649_JaffaCakes118
Files
-
38562e09ae943cdb13d350d183d93649_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE