Behavioral task
behavioral1
Sample
446d39f1999f31c980d25b1890c1d8c4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
446d39f1999f31c980d25b1890c1d8c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
446d39f1999f31c980d25b1890c1d8c4_JaffaCakes118
-
Size
79KB
-
MD5
446d39f1999f31c980d25b1890c1d8c4
-
SHA1
4bea7753803a59f064147447105983e8001d11b4
-
SHA256
1b2d4c39e7cf6d3533a1856fb858bffc540e8ff4e966e18d06edd1bca39da87c
-
SHA512
e0143b7238bb4ec3fe520d43cef9125ccf4d5ed993e1c7da38c9c905b5393fa3b750120667adc73a0bbe542bdcd95b6a8aaf3bbb31fcfd7353d91e145ebe0a80
-
SSDEEP
1536:bM1KxpoBjIIhbv/utkCSWiwFz/JOQ96fWRJn1Y7xrbYMJHs8/26p3zp8:bLmJIQTolSWBRJZ4+Jnm7BYeHs8/73zS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 446d39f1999f31c980d25b1890c1d8c4_JaffaCakes118
Files
-
446d39f1999f31c980d25b1890c1d8c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE