Behavioral task
behavioral1
Sample
438121c72fed1f020a1fd216f9dd7806_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
438121c72fed1f020a1fd216f9dd7806_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
438121c72fed1f020a1fd216f9dd7806_JaffaCakes118
-
Size
490KB
-
MD5
438121c72fed1f020a1fd216f9dd7806
-
SHA1
fe392e8f5ba50ff4fd9704056e52d06e4e21c074
-
SHA256
a5defc75f6530072504b03d4fd6b3ed5d0ea02aab9efdc74d2e28af58353bfc1
-
SHA512
baeef3cfdfdf3695ecd675c6b18713874865a94e24b2b3db8581470d9e7aa242c0d351fc2334562451fad2f90c6a4c12a35ac80bcca7874cae87e1a85c0faf9d
-
SSDEEP
6144:6xGIi+Q5RBvHyBnk3o83xbNlMEnFqbFuk+4xoFltJ:PdmnkRlMkFqpukhav
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 438121c72fed1f020a1fd216f9dd7806_JaffaCakes118
Files
-
438121c72fed1f020a1fd216f9dd7806_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE