Behavioral task
behavioral1
Sample
43511fad5dd464f6e384767d99e04839_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43511fad5dd464f6e384767d99e04839_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
43511fad5dd464f6e384767d99e04839_JaffaCakes118
-
Size
6.2MB
-
MD5
43511fad5dd464f6e384767d99e04839
-
SHA1
3752cd9d71a1bd46de327e6f45075673ae070054
-
SHA256
080ef77b588237ae841414d857d04a3980e9108e913fdff2325fbaad802dcc29
-
SHA512
9d8d4c2e4b332308c5cf98df1650cbe40d090dfb50a8c36a0ee91f4bd375e73c93c10cf6858e17fd8097dc3f38e2cdd6304e9f1a6885fe8ed6b933b7e05a4116
-
SSDEEP
98304:PrQZ6rQZNrQZ6rQZNrQZ6rQZNrQZ6rQZNrQZ6rQZq:Pr26r2Nr26r2Nr26r2Nr26r2Nr26r2q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43511fad5dd464f6e384767d99e04839_JaffaCakes118
Files
-
43511fad5dd464f6e384767d99e04839_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE