Behavioral task
behavioral1
Sample
38878e36ac0138ecbfbfc843bc09b191_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38878e36ac0138ecbfbfc843bc09b191_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38878e36ac0138ecbfbfc843bc09b191_JaffaCakes118
-
Size
137KB
-
MD5
38878e36ac0138ecbfbfc843bc09b191
-
SHA1
e0ddc6d1f74c278728f8edc65ad091a4cc06dfa7
-
SHA256
a2bda699f7f2227d462baa6fce8dc66d80232082760162fe9ab635c808a74deb
-
SHA512
63e2f6b83d2f5babfd9b35fd6dd2446d458b1fcdbbb5af9ecd78c4eaf141f580c9cdd761d41c654701eee819cf6fb2381aef137a0b794aaa07af217df3e39e46
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W3:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38878e36ac0138ecbfbfc843bc09b191_JaffaCakes118
Files
-
38878e36ac0138ecbfbfc843bc09b191_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE