Behavioral task
behavioral1
Sample
b39e431820499d6e88131ea3e880ffcb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b39e431820499d6e88131ea3e880ffcb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b39e431820499d6e88131ea3e880ffcb_JaffaCakes118
-
Size
51KB
-
MD5
b39e431820499d6e88131ea3e880ffcb
-
SHA1
8d0c0e7bf686d4df146dd38a20653c7412dbd934
-
SHA256
4092f6a9b8f3f4153b372510fdeba5e37c00c846a9165e4bc08ad638bb139009
-
SHA512
eb7f74885baf4ff6d5909fd3a3076aa69c64f27773533c7623944219d5fb4fb5b5bd36de02cdb9619b59b994055862c5a5ec65dd4d2322890df699fa46de3980
-
SSDEEP
768:UkYTL0bL6eLz7vydjFFw0rqEIn5CHV7M5EHdMtSLqmh7ePAl+iU+01LxjS4Ym:rqA6ynvyfFwxBn5czHmIFyIwzrxGdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b39e431820499d6e88131ea3e880ffcb_JaffaCakes118
Files
-
b39e431820499d6e88131ea3e880ffcb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taz Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE