Behavioral task
behavioral1
Sample
9425b907e05d9246808cd76234d84059_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9425b907e05d9246808cd76234d84059_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9425b907e05d9246808cd76234d84059_JaffaCakes118
-
Size
108KB
-
MD5
9425b907e05d9246808cd76234d84059
-
SHA1
c8341ae433fa94c5ec792b842f2acccfa703040f
-
SHA256
ec3400cf852b7f178d79be9b79946eba5def13e043ea1b87abc2ca504cd0f1d3
-
SHA512
38e433f1fb4e8edd852a280245b54cac64cc7a640a52f0dda522ea5cdcc20c7548763e3d6d4849b68f573d10829d5631ed4dfe4bdc0e5dc84af97555435d588d
-
SSDEEP
3072:voy8j7VnNdrPHaSekwi+mW+2h3PzWfLout:/8jZ7rvaU3+mWrh3YoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9425b907e05d9246808cd76234d84059_JaffaCakes118
Files
-
9425b907e05d9246808cd76234d84059_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE