Behavioral task
behavioral1
Sample
37154fe69ad8dcb3bbc384ad06d76319_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37154fe69ad8dcb3bbc384ad06d76319_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37154fe69ad8dcb3bbc384ad06d76319_JaffaCakes118
-
Size
49KB
-
MD5
37154fe69ad8dcb3bbc384ad06d76319
-
SHA1
00d967b13bc002679f4c28c6872018b5d54fb2df
-
SHA256
e0b38760bb0e88bba563004cd95810762b4306f1c02c0599228fd9f83a4f2b4c
-
SHA512
89d36083b2782730f0f840af18558a87e85f937f582a23fd493632a1c122e4b5ded3486a9c8fb37fabf754c8805cc9968ffb8d506954354fe06e18ccd107dc51
-
SSDEEP
1536:dJeYYhFHWNwfvxDu98i9GUmJBdqCGRb5R:dJeYuHqQvxKqiUJPbw3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37154fe69ad8dcb3bbc384ad06d76319_JaffaCakes118
Files
-
37154fe69ad8dcb3bbc384ad06d76319_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE