Behavioral task
behavioral1
Sample
385f8a48f500af424bbfe6d79b1e0691_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
385f8a48f500af424bbfe6d79b1e0691_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
385f8a48f500af424bbfe6d79b1e0691_JaffaCakes118
-
Size
161KB
-
MD5
385f8a48f500af424bbfe6d79b1e0691
-
SHA1
73474a85f6a91561380b6cca53ed8d5c27db7422
-
SHA256
c85ca0a6ffa10309721ca01ee32801a8bec429ce9911a28806f2eb8786b13c1f
-
SHA512
71ea20c66f7a7a13e4ce9267553d9026ed29c6d4b5f41a55230034804987b3a4c8389cde3135c28b8797eabbc525e888fa13f7e4f369ecc6d4c538f49736b710
-
SSDEEP
3072:R6MTh0aLjhX9yPCPgK2SD19vNDYwX9vMuqB31wXtvmvEIWqEKyLVB:cSjryPuV2WFhvHqTwXdfI2Ks
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385f8a48f500af424bbfe6d79b1e0691_JaffaCakes118
Files
-
385f8a48f500af424bbfe6d79b1e0691_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE