Behavioral task
behavioral1
Sample
394c1d958e83e942c4c21a4ad227e539_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
394c1d958e83e942c4c21a4ad227e539_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
394c1d958e83e942c4c21a4ad227e539_JaffaCakes118
-
Size
35KB
-
MD5
394c1d958e83e942c4c21a4ad227e539
-
SHA1
f83ce8294436290a95960c0c0b5abba9a9243edf
-
SHA256
926eb1a7abc8ac7feb29e6471782489497f5d8ada61d0bef428cb1277beceb75
-
SHA512
af37a30c5b426e4aa4a9b03e684f1fa55051dca36030874c822056976c0ac0466de16813effff8dcaa2b152850ebe727325e73584583a41eba28efbad5b94ff9
-
SSDEEP
768:iz3LLXon7BTeRMkN6apmQleXOl0Ddy7dUDTopZu7dTuP:i3To7NejN6Mm4CjRxDEpZ0dS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 394c1d958e83e942c4c21a4ad227e539_JaffaCakes118
Files
-
394c1d958e83e942c4c21a4ad227e539_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE