Behavioral task
behavioral1
Sample
377c7286e8cc0abade0e2188e6605166_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
377c7286e8cc0abade0e2188e6605166_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
377c7286e8cc0abade0e2188e6605166_JaffaCakes118
-
Size
8KB
-
MD5
377c7286e8cc0abade0e2188e6605166
-
SHA1
f6e821b14cd002c98587727fb7c4811d317ea67a
-
SHA256
9e41c92423cef25c55be4f84cc681b97ac83d5ebf38348ab6ba8cf0e4559ab80
-
SHA512
8c48559e2fbb1a327d020457935074cfe34e16ed01968432495c86437121325e6c30315b3eb1d977ad83c3713ae8d462f6613e3a1bbec6ed2a4c5867d4d574f0
-
SSDEEP
96:pOlwRmz2Lu85mAlaFIEyHkTXaD98HVlvcZc066kdroPfAz5XI1jP9Uc0dKKxBHUt:p3DmALDHk298zN5VdrooqjlUXeWsrXf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 377c7286e8cc0abade0e2188e6605166_JaffaCakes118
Files
-
377c7286e8cc0abade0e2188e6605166_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 924KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 841KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE