Behavioral task
behavioral1
Sample
d359809395d3d66532ebe53104a6547e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d359809395d3d66532ebe53104a6547e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d359809395d3d66532ebe53104a6547e_JaffaCakes118
-
Size
4.8MB
-
MD5
d359809395d3d66532ebe53104a6547e
-
SHA1
f4db3ee8814692ccc4133e69cb0b7d785e8022b3
-
SHA256
0da70db56f823d337f24e5c379eb66491ae85400b1acbff5c78d5530e7eb45ca
-
SHA512
889072a44578dcee5c743a78031c3eb6ce2e04494a9aa51b8a6215f5895e5ac219d57927bc2be5bd9ba8513f825feea2533020ce2340cb31c25119dffaaffc72
-
SSDEEP
49152:gt2BlAIfEA9M+w6zmEgWnJqnYlseFYEQxMxysKI4pnes8wpmQ:gt2NM+w6zmS6YlsSys9KnV8wpmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d359809395d3d66532ebe53104a6547e_JaffaCakes118
Files
-
d359809395d3d66532ebe53104a6547e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE