Behavioral task
behavioral1
Sample
39aca39fc3d8f4cac14fb95362007c25_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39aca39fc3d8f4cac14fb95362007c25_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39aca39fc3d8f4cac14fb95362007c25_JaffaCakes118
-
Size
241KB
-
MD5
39aca39fc3d8f4cac14fb95362007c25
-
SHA1
c0af9f347d5b8836530da3a7811e25822cd6223d
-
SHA256
5840115523ea8a0f44cbd1bc0b5a176afa7f0111fb53c994915feb98a585d713
-
SHA512
167cbf1c0066d36aa034254621d0876c41964773df6d01548e87f7b16b790bd7ca1032d9f01d5a526f665b255a6b3396da40cae27ad1b377f8c1c163df9fe945
-
SSDEEP
3072:GUotndiv18uHB61VIQPoEabrq0fy1C/FN4/iEzyxCUvsdKNz4H1:7oni9Dh61VIUMbrq048FNcHyxRsa4H1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39aca39fc3d8f4cac14fb95362007c25_JaffaCakes118
Files
-
39aca39fc3d8f4cac14fb95362007c25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE