Behavioral task
behavioral1
Sample
442424b47d28007bf773eeafb355e875_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
442424b47d28007bf773eeafb355e875_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
442424b47d28007bf773eeafb355e875_JaffaCakes118
-
Size
180KB
-
MD5
442424b47d28007bf773eeafb355e875
-
SHA1
ad359265d3eafaff0e65e6738ae1e5f701b5a69e
-
SHA256
c837da2ea0e6b33ee9176721ba40d0f0410b5589ea868955f16f2c1e28b2f972
-
SHA512
9d50a7291451987f782300932458ddeeb2ec4a93c24ffdfc95a91a2132ac506fb377e9df9e22521aa14cbfd0bcf76168f00fba455292add2bf3bd5bf63d95862
-
SSDEEP
3072:+y9PBum9ElRzVMpA/Ks8SsddOdudlQWr:+yZBudlRJ7f8SwdPl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 442424b47d28007bf773eeafb355e875_JaffaCakes118
Files
-
442424b47d28007bf773eeafb355e875_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE