Behavioral task
behavioral1
Sample
444bad2f224ae18e4bb0c94547128c91_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
444bad2f224ae18e4bb0c94547128c91_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
444bad2f224ae18e4bb0c94547128c91_JaffaCakes118
-
Size
29KB
-
MD5
444bad2f224ae18e4bb0c94547128c91
-
SHA1
af2cfceeb5c5ce4c3da5d4752b7faacfab3cfd53
-
SHA256
43c65d645f53a74671d60ee93badb95202b11dd6e7587b4c15f682bd6b16517d
-
SHA512
5b19caef4ef2605b389937e3020d756b444b91c4d0456a8564a7d8dcfc8e4b35630d8689d340d6cda3f25200d1df8677cb9be89a81e6a84bec7db87117994764
-
SSDEEP
384:p6abtc3lz7fMoNVj9hxRsEaK6UfX8mDxd/55JbAhmslj4WWdGGUA2LzWvmjYGo/7:9M33j9hCTSsmbj9F4kW8KynGO0NdQX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444bad2f224ae18e4bb0c94547128c91_JaffaCakes118
Files
-
444bad2f224ae18e4bb0c94547128c91_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE