Behavioral task
behavioral1
Sample
837a1aaeb5c83fbdb9f38504fe2abed8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
837a1aaeb5c83fbdb9f38504fe2abed8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
837a1aaeb5c83fbdb9f38504fe2abed8_JaffaCakes118
-
Size
137KB
-
MD5
837a1aaeb5c83fbdb9f38504fe2abed8
-
SHA1
c4722b203c336e2a7c1cf5166bf3fa95d1176b95
-
SHA256
139f950f38908ae9a8d33a48edf47e4e09d9201b783ebe0bcdd4ae974219ae01
-
SHA512
19ea3ddff4be1a65cade511ecb7b85a305732e46cec24feeba7976d833e27e537b2b5ca1741ec3cf067f24340ad73970965dd6c3db6293e611b7f4c4acd06536
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53Wk:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 837a1aaeb5c83fbdb9f38504fe2abed8_JaffaCakes118
Files
-
837a1aaeb5c83fbdb9f38504fe2abed8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE