Behavioral task
behavioral1
Sample
412a51fd319a685eef64b3d58dff1f86_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
412a51fd319a685eef64b3d58dff1f86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
412a51fd319a685eef64b3d58dff1f86_JaffaCakes118
-
Size
211KB
-
MD5
412a51fd319a685eef64b3d58dff1f86
-
SHA1
6da123a54aea3bf2bac6d341fe2193c713ae82af
-
SHA256
1a42dfb413290e6f7e6ec93d46292301647b8a6d4d4addedceb92c3222c2726f
-
SHA512
23f61eb196e998bae32c10e5c9f32244041f0cc44038cf2a42989a5245533826d8a143cc20899b9e36635880dd0985f9cc944cba31cc43b11e26936ecaae97e3
-
SSDEEP
3072:Hw8pgD1Whfu3AFQuqUfxQQ7nC2g6aLSTWsjFrfWMzgkUSGuv:QCghMuut7+Q7nukrftLlG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 412a51fd319a685eef64b3d58dff1f86_JaffaCakes118
Files
-
412a51fd319a685eef64b3d58dff1f86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VUPX1 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE