Behavioral task
behavioral1
Sample
382f6c33cb9ab0aa495c8140d655ab08_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
382f6c33cb9ab0aa495c8140d655ab08_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
382f6c33cb9ab0aa495c8140d655ab08_JaffaCakes118
-
Size
6KB
-
MD5
382f6c33cb9ab0aa495c8140d655ab08
-
SHA1
f3c3a6ee947f46755b46cf7ce920adaf69ce7022
-
SHA256
6ed99c63ce6129e912d851642d2b44c48d5625e1dedc09a38d2a4ea48133489d
-
SHA512
d9747716b074a127c95cabb8a6e70e6505ab95d0c9ba671277471584659ad07f55cb9639d5aa5beb95fb09be99cca7077ff358e843f4c0ec7d9d91aa924ee927
-
SSDEEP
96:nPQ0NKrT7n2qylw5q6E8HOj3WREE8FYD3bFrOmn0tK6RItMt156I6wxeLXuZ6v:nVilPj1A/Y/F7n0/IKt1Fl0uZq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 382f6c33cb9ab0aa495c8140d655ab08_JaffaCakes118
Files
-
382f6c33cb9ab0aa495c8140d655ab08_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 183KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE