Behavioral task
behavioral1
Sample
4050c0bbe0a94dc932c992c8239ba846_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4050c0bbe0a94dc932c992c8239ba846_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4050c0bbe0a94dc932c992c8239ba846_JaffaCakes118
-
Size
4.9MB
-
MD5
4050c0bbe0a94dc932c992c8239ba846
-
SHA1
ee75c63ece3d408dba15340ddf60b83a3c95ac93
-
SHA256
d332e6da1e2f46e10bfb7c348cd29ad79b0ab210dd123f7c43445603dad8e1de
-
SHA512
0a1897a5bde172fbe36019c7c9f8381f0bdb12bed40546c6d5ab236343cfa95fa5d85e89c3341fb9f53a44fb5a0c0b052f01c51fbeff5e51890c0f358e3112fc
-
SSDEEP
98304:/0qT0/0qC0FwwRZHwl0qO0y0mC0q2wca2wr0qA0Kwf0Z0qGNXywHw7wl0qFwf00D:/1G8doQl49kfRNreMfyUhQMl0fJ8bb07
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4050c0bbe0a94dc932c992c8239ba846_JaffaCakes118
Files
-
4050c0bbe0a94dc932c992c8239ba846_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE