Behavioral task
behavioral1
Sample
4201d2e953a274d5a448a7577a88f22c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4201d2e953a274d5a448a7577a88f22c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4201d2e953a274d5a448a7577a88f22c_JaffaCakes118
-
Size
8KB
-
MD5
4201d2e953a274d5a448a7577a88f22c
-
SHA1
4956ce6677267cfd54e95d89829081b01e2c4bde
-
SHA256
8aac5ae99418780ff020380e944d93b2164368b6d691924dc032a97486bfd778
-
SHA512
dfd0237c3a17950417ab42dede254473afd7ac5d5cb81cae1ddddcd887835c64eef844e1dc0b53be68552eb567be91b62bb8544c26921e91efceac56e8f81788
-
SSDEEP
192:bN0S0Y3mZsVh83+s87y80uZYICLCRWEQZd+:h0fYWZQh8Os8280uCNLCUr8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4201d2e953a274d5a448a7577a88f22c_JaffaCakes118
Files
-
4201d2e953a274d5a448a7577a88f22c_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE