Behavioral task
behavioral1
Sample
38f3e2d4ac32bc2c57327a878eff1e9b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38f3e2d4ac32bc2c57327a878eff1e9b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38f3e2d4ac32bc2c57327a878eff1e9b_JaffaCakes118
-
Size
137KB
-
MD5
38f3e2d4ac32bc2c57327a878eff1e9b
-
SHA1
1bec736a126ab4631be57bdc5427ea3e11439a17
-
SHA256
d299d008afcf8619f7b70e442b6a9a6609c9f753e51f50eb402aae2f6534dbf3
-
SHA512
d3e6a771b0c9c3fd83afbd0be5bc59460f2c6aed8cd50909593896150f5fbf5a91f2acb9ca6c13e50ccd93bd42865844e0247dc7b350822a8b8297562a827abb
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WM:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f3e2d4ac32bc2c57327a878eff1e9b_JaffaCakes118
Files
-
38f3e2d4ac32bc2c57327a878eff1e9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE