Behavioral task
behavioral1
Sample
392b6a4d8573fa50c21e71ef7134eae1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
392b6a4d8573fa50c21e71ef7134eae1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
392b6a4d8573fa50c21e71ef7134eae1_JaffaCakes118
-
Size
184KB
-
MD5
392b6a4d8573fa50c21e71ef7134eae1
-
SHA1
5a63c6f2f7630b2663d8ad7cfc05f81e3bd514d3
-
SHA256
41b9bbc2dce981d7b8d121516d8c6d83bf8bf09bb8626b5b58a4727ed7f36276
-
SHA512
bcdfd0a03f7b82f4c75db2e3f176b519db6af0d1f7cb442860869f19d5d7f2ee7339f5a7981f52835a59d9c089d205a1851ea34ac60fd267846f5202bfdaf5de
-
SSDEEP
3072:Xe7d9M/htP0bwRvx6I1XJUAuC2nxXI2vaTgHvQvA+uEmc/J5a:uBO/htCs687Wn3yTgQvPmc/J5a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 392b6a4d8573fa50c21e71ef7134eae1_JaffaCakes118
Files
-
392b6a4d8573fa50c21e71ef7134eae1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE