Behavioral task
behavioral1
Sample
03151589a89a0afd9eb4b14778e1213f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
03151589a89a0afd9eb4b14778e1213f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
03151589a89a0afd9eb4b14778e1213f_JaffaCakes118
-
Size
6KB
-
MD5
03151589a89a0afd9eb4b14778e1213f
-
SHA1
1d0d14d74ec471038421731c2794317957674b35
-
SHA256
b679ede04b6aadabaa6eea8e61a31a67af2533fd5b8ce057169de605fc958199
-
SHA512
7dd99397d403593dd801cae0d8939acf10256251430e23b4bc73b5b130265e9bcc69b7bf3ddf096fa835ed9d8a7a7e20d7a430d3e239fdf8a377c197a817cc3b
-
SSDEEP
96:Rn3La6rIxvltpfKrjASRGBUrfKNPa/8y2SW/3wDeGqbpEEpCqv0Yw2tOkBS09LZf:R38/DKjASa8/koDeGsfsY/zBD4cf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03151589a89a0afd9eb4b14778e1213f_JaffaCakes118
Files
-
03151589a89a0afd9eb4b14778e1213f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE