Behavioral task
behavioral1
Sample
37d8fecfeac58ff2b4a0eaad09fa37a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37d8fecfeac58ff2b4a0eaad09fa37a2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37d8fecfeac58ff2b4a0eaad09fa37a2_JaffaCakes118
-
Size
69KB
-
MD5
37d8fecfeac58ff2b4a0eaad09fa37a2
-
SHA1
96bc97195630a9f33c546952c30c740bcbde0c72
-
SHA256
e884cb09aa711d6131f999288a64d66b4558f925931456daad6cf84866ab2bb1
-
SHA512
cf3b1d46ed14941d7d430d91ae2d343fa4370f0a22a34b03b8e502d59181265f1e419bdfaea0008138c5cdc0c1abecfc0b4d0a8bbf642467455a67335c205ee9
-
SSDEEP
1536:y4QQ6NSyM61l19piO+LV8YEoI/EU9RUe4m2qoLnh:y4X6NSyfnpijeYEoIcq4llLh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d8fecfeac58ff2b4a0eaad09fa37a2_JaffaCakes118
Files
-
37d8fecfeac58ff2b4a0eaad09fa37a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE