Behavioral task
behavioral1
Sample
44572f8f856a416e4559344de7125579_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44572f8f856a416e4559344de7125579_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44572f8f856a416e4559344de7125579_JaffaCakes118
-
Size
124KB
-
MD5
44572f8f856a416e4559344de7125579
-
SHA1
05eb4f1e007968ec2d48558a40e0ae07d525bde4
-
SHA256
023997ca6379ccbe18d9c162e155172fa9f2ced26a7c7f4632b3a21202be79df
-
SHA512
533323ccd09b34038802e222d5dfd9f3ef7399f236e9303074e547efc1e5dca5a87ca7f03e3dfde1e4222f55fae6443b0d92bd2fb29700d61a8e7287b4eb5f99
-
SSDEEP
3072:Kkie6B4YdOUtTs1Q+R5z38TOxYpuNexs40M9IndHxr0Cx:Khe1YdOiER5z32KY8UZ0MwdHxr0Cx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44572f8f856a416e4559344de7125579_JaffaCakes118
Files
-
44572f8f856a416e4559344de7125579_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE