Behavioral task
behavioral1
Sample
42623b3cce880b8132a9d4bb722d8106_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42623b3cce880b8132a9d4bb722d8106_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42623b3cce880b8132a9d4bb722d8106_JaffaCakes118
-
Size
286KB
-
MD5
42623b3cce880b8132a9d4bb722d8106
-
SHA1
679e332703e63c456e30f4136c577b17bfdbcdae
-
SHA256
5332549d44af860445015b8373b05ff95b3f726dac35961603f2aba3b9761ec9
-
SHA512
f4aa44ac4ccadb971228942d21afb85224e9c94d1955940d043b6638389635ab96b72c8d701bd570845ff37865a0468bdc5e0e508bc5a2ab749d0c7321e62f63
-
SSDEEP
3072:ookdMFA48crY/J32g6mZtYajHF91Vs51whlNvIlVZQWpmeTE+:ookST8c23xRZtYah91M6HNv0VZ7pb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42623b3cce880b8132a9d4bb722d8106_JaffaCakes118
Files
-
42623b3cce880b8132a9d4bb722d8106_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE