Behavioral task
behavioral1
Sample
390d3c15151c8f6ff7854bfb9573f214_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
390d3c15151c8f6ff7854bfb9573f214_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
390d3c15151c8f6ff7854bfb9573f214_JaffaCakes118
-
Size
29KB
-
MD5
390d3c15151c8f6ff7854bfb9573f214
-
SHA1
893e94577d8308d92ae5d4688b9a9e167a06e770
-
SHA256
e3de55b204e199321cba3bf095c4e203d43d8d17b0650e15f48b6b4db066ba11
-
SHA512
abd80e4f5010e0dd35893640dec544c49733309d1cbf7b60219ef9571c65ce5207531d85e8f600df948bd24767f4660aa667b5baf9d7e54b6cac27098d295f4c
-
SSDEEP
768:syY8xeFWTk1cxGKQcvy4pk5A257vGK5/un:s0c8w1cxEA257vG0/un
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 390d3c15151c8f6ff7854bfb9573f214_JaffaCakes118
Files
-
390d3c15151c8f6ff7854bfb9573f214_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 639B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txt Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE