Behavioral task
behavioral1
Sample
399b6f43e0c97a74ecc26251f6c09506_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
399b6f43e0c97a74ecc26251f6c09506_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
399b6f43e0c97a74ecc26251f6c09506_JaffaCakes118
-
Size
850KB
-
MD5
399b6f43e0c97a74ecc26251f6c09506
-
SHA1
11fbd0823384eb9b32717f684e03204d51911934
-
SHA256
3e38e54cb8a71b747d18aeed8c38f577eb9271b6894aa0ab1b7f01260bc53b2d
-
SHA512
0d13c6e237aa2b740f29000cfd3303ec769566fcf5289becf16840334854f22b4471c8fd89566e8b465394aa9a2f80b232fb41da4c3ef4c25a5a77c288d3d7d8
-
SSDEEP
24576:zeKmuM2aRoFZzwSbUwRUUTkukk95gpWUGG:CKZaRoL8iUhUTAk9QpGG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 399b6f43e0c97a74ecc26251f6c09506_JaffaCakes118
Files
-
399b6f43e0c97a74ecc26251f6c09506_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE