Behavioral task
behavioral1
Sample
37b35538c79cd02039f8db12949c3e73_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37b35538c79cd02039f8db12949c3e73_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37b35538c79cd02039f8db12949c3e73_JaffaCakes118
-
Size
353KB
-
MD5
37b35538c79cd02039f8db12949c3e73
-
SHA1
4a9f9e44fec62a2b51ca3fb66932a35008a0e66b
-
SHA256
60b61f1ecdef9d810b7859c9941802a95ca042219e840fddb2e8cb42a9a4efca
-
SHA512
175072f39b128c952c5b785895a01a41466c821f8c6de245b527b23eb289780df160de31f058584e260d9b85c5f9b8c2205f1ca6a9e9c32c48feb11407bbe9dc
-
SSDEEP
6144:oY2vrpMzFM7yBz//Zuk3JdtuhjIemNudwOzQX3EFxSIbjak3b8iCUoSE:oYyrp/2z//Mw5qmUwOze3EF5jZr8FUoh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37b35538c79cd02039f8db12949c3e73_JaffaCakes118
Files
-
37b35538c79cd02039f8db12949c3e73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE