Behavioral task
behavioral1
Sample
0793481688745b1d1ee56bed785d1051_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0793481688745b1d1ee56bed785d1051_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0793481688745b1d1ee56bed785d1051_JaffaCakes118
-
Size
74KB
-
MD5
0793481688745b1d1ee56bed785d1051
-
SHA1
4454a6a2c8ebc9326036df5c2dca4d3ae9827204
-
SHA256
409c7ef412da7fd2c4cbe6aae018c45a379368c2055792c9d5afb997a5335209
-
SHA512
1fc0fe09503028d2a318dfbf49213dba02ca3f6ba11f93f3c2081ca184bbe0feba54b965c5bf001a1813226d5b12876cec8861f5ab03e05c83aabfe937dbd6bf
-
SSDEEP
1536:4sMFd+0zEEWwD/bE+Ej+w5JrnJTuhXTPg/cELljMguyYCnbQkgVT:2IUbSj+wHrnJCPfEhjMhyXnbvgJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0793481688745b1d1ee56bed785d1051_JaffaCakes118
Files
-
0793481688745b1d1ee56bed785d1051_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE