Behavioral task
behavioral1
Sample
40c0985519a0bc546360624919bb80e4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40c0985519a0bc546360624919bb80e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40c0985519a0bc546360624919bb80e4_JaffaCakes118
-
Size
15.7MB
-
MD5
40c0985519a0bc546360624919bb80e4
-
SHA1
c28b61f08566e3e3ccd3899b504d874404f202c1
-
SHA256
661804bc60dd47c2b812e6379bf3b261c5479ba5e7e4e4075e12dfd9ffd131d9
-
SHA512
b07804d247c7248721e8d06414918fd02d441a58d276f174cd111a8911a6b3485feaf5df429dc7600775b0493410a48ea3c7622ad9a9da6e90849c31886a89d2
-
SSDEEP
393216:BOxe4mcPxAa9xe4mcPxb7X9xe4mcPxAa9xe4mcPxO2u7fxe4mcPxAa9xe4mcPxbb:ko4m2R9o4m297X9o4m2R9o4m2M2cfo4H
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40c0985519a0bc546360624919bb80e4_JaffaCakes118
Files
-
40c0985519a0bc546360624919bb80e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE