Behavioral task
behavioral1
Sample
39d672f5406be604748f1787ffc45fcc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39d672f5406be604748f1787ffc45fcc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39d672f5406be604748f1787ffc45fcc_JaffaCakes118
-
Size
21KB
-
MD5
39d672f5406be604748f1787ffc45fcc
-
SHA1
b27b1ca31b597c7c07eb59df66f38900db384123
-
SHA256
2f44e292ec630e0b64e5e5b59d1bdecf767c9d9934d4e8a05a3bc6c54e71227c
-
SHA512
316811d920a5e192a19f8f674e1d1b5f47a8aa54e6ce14d6e004773ac27cda378ee329d4ce76e41e7f3110c0c9d03ac64e960a6f29fddf7d290763f66d2a7fa4
-
SSDEEP
384:BIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZey7VaNJawcuN:BRGuY2P0Vo6r7SiAwyrMRjbR7Inbcuy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d672f5406be604748f1787ffc45fcc_JaffaCakes118
Files
-
39d672f5406be604748f1787ffc45fcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE