Behavioral task
behavioral1
Sample
39dc4da81ee86e7f6c51ce0b0d3017aa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39dc4da81ee86e7f6c51ce0b0d3017aa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
39dc4da81ee86e7f6c51ce0b0d3017aa_JaffaCakes118
-
Size
414KB
-
MD5
39dc4da81ee86e7f6c51ce0b0d3017aa
-
SHA1
9493151562f61fdbfcfb6bf0036ba181e7531df4
-
SHA256
8b2fa4ba8f1e43b8dc9aa27ba56c9926df1a9e592464c2d908bd0391f1e2be63
-
SHA512
ac9dbecf9f479a5cf3924f2099233da4edac6cee6a5128b719c2570c01d15fa7e1282a7700cd08304fccdf2d7790b984d6d578a41d8a2057e996680ac0a0008b
-
SSDEEP
6144:waF9zXqiPQX+L/pUZdwr1agfrQA9jlV/XCiY38troSrMFfzDVldBh:wEz6EtkdwrsgfcsSiY3SoSrM1BB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39dc4da81ee86e7f6c51ce0b0d3017aa_JaffaCakes118
Files
-
39dc4da81ee86e7f6c51ce0b0d3017aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE