Behavioral task
behavioral1
Sample
38e0174faa96192e01c1d4afd0960465_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38e0174faa96192e01c1d4afd0960465_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38e0174faa96192e01c1d4afd0960465_JaffaCakes118
-
Size
17KB
-
MD5
38e0174faa96192e01c1d4afd0960465
-
SHA1
a2b6d78a34a5cb60b511841bcda45df5a0c46b64
-
SHA256
d0e0a6f46d2cb714579d4bb0c2f27448acde518d4bfbb3622c6008b4a6ae74bb
-
SHA512
88fb5a4f384b47380d997daf1af76c25157db261d66c678df1fd38586607f89e14701b0eb46783ab956771809b58f45b70670a536045f55b0d137e3d0766f8e4
-
SSDEEP
384:YUzdWRj+Ix8eCke+4z5Ls6iKHDz183yghtbt:YUzCnx8Me+4lLDiKHDz2bp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e0174faa96192e01c1d4afd0960465_JaffaCakes118
Files
-
38e0174faa96192e01c1d4afd0960465_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE