Behavioral task
behavioral1
Sample
dc0b39344b30da588631509b57800ae3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc0b39344b30da588631509b57800ae3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc0b39344b30da588631509b57800ae3_JaffaCakes118
-
Size
18KB
-
MD5
dc0b39344b30da588631509b57800ae3
-
SHA1
f4a0d9245a92ac4d1620ddc9db36c2f32292e93a
-
SHA256
442d4ef8e175e58d6fcc091756419c67c40cd0866e741cecdaded951ebbee9e7
-
SHA512
00b032589d30931c232bb0ecf1039e0775a8e54efb1db30fadc1f11d6f4645d50b2f8135f742cde31ed76e1a633d7e47f654744435964ac4ffc47c8f2a9f1d17
-
SSDEEP
384:ACCws67uotk4bY2Y3sjLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLd:ACBjYQLLLLLLLLLLLLLLLLLLLLLLLLL5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0b39344b30da588631509b57800ae3_JaffaCakes118
Files
-
dc0b39344b30da588631509b57800ae3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 40.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE