Behavioral task
behavioral1
Sample
048eaa5e8eaad62020cdbe43f439817b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
048eaa5e8eaad62020cdbe43f439817b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
048eaa5e8eaad62020cdbe43f439817b_JaffaCakes118
-
Size
29KB
-
MD5
048eaa5e8eaad62020cdbe43f439817b
-
SHA1
ba87b393b22071a819bf7ec617e776bfc16187bf
-
SHA256
9be0d9f3c0f5fcd8e5b67e9fcf8264fb5a7753980801a2b999ed79fd9d21b671
-
SHA512
8e67087e4ec500d481a70e7972628e93d21a496a31606bcf059e9c86087ebe1c5926dac72d6b57fbf46ca37d6abaabd97f032b818b841a6c5242ac476939b5c8
-
SSDEEP
768:LnYTteTVXSG11EGn39wGtQ2OG4UdJZndktc7:zYT6i81EgdtQ2OUdJjku7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 048eaa5e8eaad62020cdbe43f439817b_JaffaCakes118
Files
-
048eaa5e8eaad62020cdbe43f439817b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE