Behavioral task
behavioral1
Sample
de3fba719ecf8e039866666148156cac_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de3fba719ecf8e039866666148156cac_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
de3fba719ecf8e039866666148156cac_JaffaCakes118
-
Size
861KB
-
MD5
de3fba719ecf8e039866666148156cac
-
SHA1
18b9de5edb1c4ab09819e2cfebaa19601ce07c9d
-
SHA256
70be77042c4ce0db63e9b769176002bbd3229e0967f2627ff6f909b1c5824f31
-
SHA512
308079535d3720b6607a77098fbe1d93de775d12cde7bdeda9035040463ecb13b0c066422aa064c44987556c99e52443dec73352a71ab80cd1d2eb63e646e7e2
-
SSDEEP
24576:RmTTgT2vkl7HOq6c7DFs9i4i7qqPOiz8BEFB5qA/k1v:RYQLjVpDS9i4sbmizjN/wv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3fba719ecf8e039866666148156cac_JaffaCakes118
Files
-
de3fba719ecf8e039866666148156cac_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 843KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE