Behavioral task
behavioral1
Sample
39367b1d6c0556c7991daee587bd4b3e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39367b1d6c0556c7991daee587bd4b3e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
39367b1d6c0556c7991daee587bd4b3e_JaffaCakes118
-
Size
978KB
-
MD5
39367b1d6c0556c7991daee587bd4b3e
-
SHA1
973babcc12be2c2dc425f035417e94408da3c7ee
-
SHA256
5d278b2a752e344baa84121d4d7ba2e6ff265ad95cd26d1a94fe55d212c8875d
-
SHA512
259b38c24c323f04bb039770a7b41fc602deb1f1572a70f1ff9bb8979cfebb343911fa28357dd58a087767a6537395f3b67f214d9791a4355f03b41a28d47a7a
-
SSDEEP
24576:Jo9B9T0enaFdKt+ciaO1AM//GMQUZnq4+CREn1TMZHJ7SJbiyxeDF4r8pk:G2Maet9ZONLXZqsggHJ7SJWycDWek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39367b1d6c0556c7991daee587bd4b3e_JaffaCakes118
Files
-
39367b1d6c0556c7991daee587bd4b3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 14.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 974KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE