Behavioral task
behavioral1
Sample
38676c07981bcd2045f5a574506e3b97_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38676c07981bcd2045f5a574506e3b97_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38676c07981bcd2045f5a574506e3b97_JaffaCakes118
-
Size
408KB
-
MD5
38676c07981bcd2045f5a574506e3b97
-
SHA1
616775cd63379b2ee4149804c56008cf70ec287d
-
SHA256
5e3d3dda51fef0eb081f97bb14c7a6cdd39dfea295d54ee7c1c80bf5f4569bdc
-
SHA512
54e80380a8519d76dd4677133f00c38b2128f44243b088bd99565a9ed6c353f0d789b1dbd0b361cbf32f6643d554724fc534370d7510f76b0c0699ace2a40e5f
-
SSDEEP
12288:r6ac19ULGiDypVp2Y1fbVTTjQt1v3pi1h:+KLGiDgVp2Y1fVAt1PpM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38676c07981bcd2045f5a574506e3b97_JaffaCakes118
Files
-
38676c07981bcd2045f5a574506e3b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 704KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 398KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE