Behavioral task
behavioral1
Sample
0388b834146f58e42e93008950d63734_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0388b834146f58e42e93008950d63734_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0388b834146f58e42e93008950d63734_JaffaCakes118
-
Size
99KB
-
MD5
0388b834146f58e42e93008950d63734
-
SHA1
17fce9cc1124dd726c57faeea30023474a108984
-
SHA256
7d6656c9d6382444bc86f32147d4e978015adc1990d3c09eb0b20c1d07833c4e
-
SHA512
5b5fe0f81e68990c89be5c7fee9664d74c8118da98a6c3df989dbf5e7b46fd45dbebb1309c831ddab1d5de007997803efe63275a8953855b1f39036f64aaafce
-
SSDEEP
1536:ZT4YeeOLOZDX+6adlgr5L1E5lxNj2rS2+G5hc3E7Y5fDr3Um/Wjj9uj8a:ZJeeOL+T+6Tda5fNaOm85rrk5uj8a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0388b834146f58e42e93008950d63734_JaffaCakes118
Files
-
0388b834146f58e42e93008950d63734_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 307KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE