Behavioral task
behavioral1
Sample
4448ac87923287e59e0c2c064ea3e688_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4448ac87923287e59e0c2c064ea3e688_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4448ac87923287e59e0c2c064ea3e688_JaffaCakes118
-
Size
77KB
-
MD5
4448ac87923287e59e0c2c064ea3e688
-
SHA1
73b7123bbaf8d0388b5a3d5c5bf4061bbf2b89c0
-
SHA256
46f1eedb12d9732f7faeac1eed1ab5f7a18e397a97112619d7a1be2027afcacf
-
SHA512
f5ed675b1773f9d295f570a5659dadb69165bada13b74394ba9c0ee71917f379524753ecf1e570e6168e9932172814657deafb32fc118777e5bd4d6826ce832b
-
SSDEEP
1536:+E68MXnk/covkDYEhWOdZ12CzEUPz8j55GCnFIv7/r8in2:+EAGcDYEP926EUPzgGCIzn2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4448ac87923287e59e0c2c064ea3e688_JaffaCakes118
Files
-
4448ac87923287e59e0c2c064ea3e688_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE