Behavioral task
behavioral1
Sample
44b2d0f1dc602ed2341c5a832f4e8f9f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44b2d0f1dc602ed2341c5a832f4e8f9f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44b2d0f1dc602ed2341c5a832f4e8f9f_JaffaCakes118
-
Size
63KB
-
MD5
44b2d0f1dc602ed2341c5a832f4e8f9f
-
SHA1
6999a96b6bcfa6fedd819b6cb01d89bbeb72907b
-
SHA256
231e4400cb5c826051098c191cd7d8907004b2ee00948debbc219c01ae74f39d
-
SHA512
a38991202748d1a9887212ae4dc6b00db5b61e093baf7feb318420ff341d3ec536b37d9e937d6875b563ab624ccb02891e8ce7f2630af60c2de4364f6e415238
-
SSDEEP
768:bZYZRylylvuHPdOqx7SbCP5UwhYC1dSh93pQ3Hp:bKVJqYjuY8KJpQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44b2d0f1dc602ed2341c5a832f4e8f9f_JaffaCakes118
Files
-
44b2d0f1dc602ed2341c5a832f4e8f9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE