Behavioral task
behavioral1
Sample
40b59db5b4965b1b592c1058b7021508_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40b59db5b4965b1b592c1058b7021508_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40b59db5b4965b1b592c1058b7021508_JaffaCakes118
-
Size
190KB
-
MD5
40b59db5b4965b1b592c1058b7021508
-
SHA1
45e1795c49649614e1cf5cc0c5229ace23354750
-
SHA256
119389f4c4e0382ca425d4d6ff5be68992c21c0d17ca1b9f8b5b1ff46db68f04
-
SHA512
29b2122a872709119fccd966702e9eb7581ed75fc6c8945ea30b915bfe1ae3451ed776191ffe0290b56ef08af6140f9b8c5c2302fa5901c03e2be7a6baaec5b3
-
SSDEEP
3072:v1mkYNClThTkSWSyQEtXgD3lT96oiyzjzGtragdCIhL4U0es07rY41C6j:3YNkkSWSyQzD3N96dd5CwdXYFa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b59db5b4965b1b592c1058b7021508_JaffaCakes118
Files
-
40b59db5b4965b1b592c1058b7021508_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE