Behavioral task
behavioral1
Sample
4266f37462b09b44d225449dad2f056b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4266f37462b09b44d225449dad2f056b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4266f37462b09b44d225449dad2f056b_JaffaCakes118
-
Size
2KB
-
MD5
4266f37462b09b44d225449dad2f056b
-
SHA1
0ae9e25cf910039f0637cec03dfbc19897f46e3d
-
SHA256
c0c42efa20f0d20735924f13fde581594c130d4bd8e0d4b8d5510f029ecc08f8
-
SHA512
0b58a77ca1b48fce2e5fce7c933d84271d22b33a24ac0e057348d713f5c90690c089ba12b7df2f53132b1644dacbd1dbad79bcd32e26f8d776cf1698153654cb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4266f37462b09b44d225449dad2f056b_JaffaCakes118
Files
-
4266f37462b09b44d225449dad2f056b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE