Behavioral task
behavioral1
Sample
385ee846edf6b917b3bfb75134061b80_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
385ee846edf6b917b3bfb75134061b80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
385ee846edf6b917b3bfb75134061b80_JaffaCakes118
-
Size
1.2MB
-
MD5
385ee846edf6b917b3bfb75134061b80
-
SHA1
b430940aab785ec65fe230a309efa0c578e0fce3
-
SHA256
a7b5debfc941ffee7e096007eaedc07e23d22a0817fed1a72dc5348bb957bbad
-
SHA512
52f489a9b38ce9695d54f0b6edaaf4ce9e956fc416815c6e2a6dd7a145231f295dbf3fb249b7ee3214349323c69e0ea67174706541be68b8c2667bb18415e08f
-
SSDEEP
24576:aLV/HS/dE8/I0ynIJ/PY3bGDaV2tqLhh09DO1qX8malOUhDJKjQZie:aLV/HNVnIl8jAtqWO1q7aA0JeQ0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385ee846edf6b917b3bfb75134061b80_JaffaCakes118
Files
-
385ee846edf6b917b3bfb75134061b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE