Behavioral task
behavioral1
Sample
38315f8efc480329830dd80e7b1da33f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38315f8efc480329830dd80e7b1da33f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38315f8efc480329830dd80e7b1da33f_JaffaCakes118
-
Size
5.3MB
-
MD5
38315f8efc480329830dd80e7b1da33f
-
SHA1
31cff8ed2bd0365673bb71df0f0c175ce414a7fb
-
SHA256
e1b344c8fb9396b7d740b4cccae71b3e9c0d0e92ece5523a0c2c4974ef93a551
-
SHA512
3635b1a76bf4cd0c95fb8bfa234d9f49655e9ddf12fd7a850ff000a70f626d38b7720b0541d42c44cca4bd04ea25f29c1c0981e39a6237bea5dbbb1b341f9d6f
-
SSDEEP
1536:SKcR4mjD9r823Fv2RxrTj2PII5l7Jstlt/Q/9dp2gNmSThs2AjaFE:SKcWmjRrz3piT6Z7Jc3/8l2UmpFaFE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38315f8efc480329830dd80e7b1da33f_JaffaCakes118
Files
-
38315f8efc480329830dd80e7b1da33f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE