Behavioral task
behavioral1
Sample
JaffaCakes118_9443e840ac07a44d629fd0f37d027252.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_9443e840ac07a44d629fd0f37d027252.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_9443e840ac07a44d629fd0f37d027252
-
Size
363KB
-
MD5
9443e840ac07a44d629fd0f37d027252
-
SHA1
cc116c036a943552fc407315b30a184e6efb0966
-
SHA256
2e41bbaaee53c79ad69bd90a4d5bd4a6b8703aa5f90ebd154c9af0c63972c844
-
SHA512
a10be712392bd7a52b2ca71f1237e0da2096cb1bcc77e9d509b8afc59973b06f69331c40815503379a1485aed4caed1fa3c3601c60860a1a067b2984052716d4
-
SSDEEP
6144:yKWnMbzIHKAYx23WyCRxA9WhO4ZDSczLVwq9tXfzB/dvmrmab6yH:ywoqAY2WDRnO6dwq/X7Btzc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9443e840ac07a44d629fd0f37d027252
Files
-
JaffaCakes118_9443e840ac07a44d629fd0f37d027252.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE