Behavioral task
behavioral1
Sample
399ebf57b0dcbd42be032b95af013c03_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
399ebf57b0dcbd42be032b95af013c03_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
399ebf57b0dcbd42be032b95af013c03_JaffaCakes118
-
Size
266KB
-
MD5
399ebf57b0dcbd42be032b95af013c03
-
SHA1
4a3d50a2456252b572e57cfe35f8713210cbbdcd
-
SHA256
48bde0d837803cc669afd00f2cd6baa6eee1c7188023c0376524ecc366c81917
-
SHA512
e045a9749cd0e5f35f5d1b1766ce5a8f3d4d0a386d39a6c1b545d3505dd0b74b52a6402b6adc57bd0fdfafea3f61ec414c19d0530afa9e52cc540776acb2355c
-
SSDEEP
6144:IOdjEsWFTW30SBATRM3h6SPYUW/J0Bva8IKHv3KQckyILAOc4Q:JdjEsWBWESCuYRJmvaAHv3ckblcx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399ebf57b0dcbd42be032b95af013c03_JaffaCakes118
Files
-
399ebf57b0dcbd42be032b95af013c03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE