Behavioral task
behavioral1
Sample
386864d6185a5084a9bc5de04884525a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
386864d6185a5084a9bc5de04884525a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
386864d6185a5084a9bc5de04884525a_JaffaCakes118
-
Size
130KB
-
MD5
386864d6185a5084a9bc5de04884525a
-
SHA1
1570e000da48559e3178cbd14ffe7af144c550cd
-
SHA256
05e9d6058c05adbbe40f89d15546095246016f868799f0a4d5dec8c86c982387
-
SHA512
f5a1614ebf49fa4ed7479ff9579e211f03a4f5e71c0f658868fba0fb999518083c1700c6ca4911ce1cdb7a5610be59e01aa71157107cbcd5a9d892c1e170b444
-
SSDEEP
3072:yieIHjhQ4ynMjjWSDRGjP4fn4oL/HLQPb2mNIHtrrout:ne0VQMjOP4PJLcn6HlroS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386864d6185a5084a9bc5de04884525a_JaffaCakes118
Files
-
386864d6185a5084a9bc5de04884525a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE