Behavioral task
behavioral1
Sample
3839b6f62f763f367323ca0369e15f34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3839b6f62f763f367323ca0369e15f34_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3839b6f62f763f367323ca0369e15f34_JaffaCakes118
-
Size
48KB
-
MD5
3839b6f62f763f367323ca0369e15f34
-
SHA1
8dc1fc03a163a7c181a408362fa304dbdea2ff71
-
SHA256
7287cf2da1957a52808a567b02f09b890e8f856c058b1570234d19f2d22b7013
-
SHA512
c88f5d0aee508879d532936e1b8250b97f996deecb969b2d6d62be99543cbb463484111af69030763f5f4f1f229f89780a3147ba5e27f574475b8941477aed79
-
SSDEEP
1536:57fotnh+B6fiJhv7bJg4I0UH70wJEIdkZogs9:57gtnh+B6fiJhzbG4I0UH7jNmZol
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3839b6f62f763f367323ca0369e15f34_JaffaCakes118
Files
-
3839b6f62f763f367323ca0369e15f34_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE