Behavioral task
behavioral1
Sample
420b11e3f35d357abb92fe8461079bd5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
420b11e3f35d357abb92fe8461079bd5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
420b11e3f35d357abb92fe8461079bd5_JaffaCakes118
-
Size
44KB
-
MD5
420b11e3f35d357abb92fe8461079bd5
-
SHA1
876ff8c492349a1e013971ee07c04d9e639e3b43
-
SHA256
4851acc198900a920ffaa6a5d0f80b40dfc7c338a4161f617f40e4c46869813a
-
SHA512
86c0a6fce0a4e96d51f5bf8b886aa8e5d1970f1c7eafdfb396b3db5bf43a0c02641fe55f6f3dd263481e304d03786ce9a84f6a4b26d26c5e26736d9497caeb4d
-
SSDEEP
768:y94dlXonkJCC4/yDEM1/NJGUj3eq+2mzuBaJOel3tFvuE:9cJC+yDEM1FJGEh+2muQNCE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420b11e3f35d357abb92fe8461079bd5_JaffaCakes118
Files
-
420b11e3f35d357abb92fe8461079bd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE