Behavioral task
behavioral1
Sample
JaffaCakes118_9443c10464390126d0a31a611be24e0a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9443c10464390126d0a31a611be24e0a.exe
Resource
win10v2004-20250129-en
General
-
Target
JaffaCakes118_9443c10464390126d0a31a611be24e0a
-
Size
356KB
-
MD5
9443c10464390126d0a31a611be24e0a
-
SHA1
7a63a099910b1c785f4c4e611682b63ff2f34794
-
SHA256
38e7943c9c0637c9601146f5489d8e8cd1c8fd8b9531412e75616689ec306c1f
-
SHA512
fddf6323109075532a3cdb1b3cbcd48e45debe8794d9c96f30ee7a5b13efa7f842c660fbb718a5b2ecad0d51049020d626a729ff7adedce56f5ed3fb01e599d4
-
SSDEEP
6144:wTnjnvrM3mjHGh5Doh9Z5cAea4Jv81E6TEHZQXbJEz:wHn438Hwerea2vEEGEHWXK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9443c10464390126d0a31a611be24e0a
Files
-
JaffaCakes118_9443c10464390126d0a31a611be24e0a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 372KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE