Behavioral task
behavioral1
Sample
d31f44721e5e1db7aade56ae06108445_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d31f44721e5e1db7aade56ae06108445_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d31f44721e5e1db7aade56ae06108445_JaffaCakes118
-
Size
181KB
-
MD5
d31f44721e5e1db7aade56ae06108445
-
SHA1
45c08612f601b837d82f3a2750a501db96234d61
-
SHA256
141bb372669fd3df181093af940cd8f3e5edf09f7b0b8f1fe1dfc4da394247f0
-
SHA512
0977ae07bb7ebfe4bec6504b2028165d31784743264e73bb309c706321f5fbaf77a49c1c953069d27f47432e204971b8c28ebf0f4952a49cf84ecf0adfaf454d
-
SSDEEP
3072:0ONRi72A0yRUNpJ8PQb7hjy0ZrojqOjhX7LgegCzrk90+ePlNbrAAawiiccyE:0O3A0yRURmo1jyiZQ1go3ZtNPAFic+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d31f44721e5e1db7aade56ae06108445_JaffaCakes118
Files
-
d31f44721e5e1db7aade56ae06108445_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 409KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE