Behavioral task
behavioral1
Sample
4490d33e9a630df38feaff9768dc84cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4490d33e9a630df38feaff9768dc84cb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4490d33e9a630df38feaff9768dc84cb_JaffaCakes118
-
Size
44KB
-
MD5
4490d33e9a630df38feaff9768dc84cb
-
SHA1
5d1476ef95933f124adb3cdb9591f49592fe942d
-
SHA256
f191f8c38679a871d817e9ab614b068de7ed7344f8eddf580a0ec2c0e0920f6a
-
SHA512
4a2c67fca0d268bbffc65edee30424d306506d56086253c477e1a7e1411827678ed47ccab650bc1b63ca88f8f4b52d8b4fe514c9589c512cfca04939082e26d8
-
SSDEEP
768:NVQFCgw7w/ccbWS7HD1WbaW4plO120gJuoAJ3vBkuFu+MVxwV8Py9k5nbcuyD7U:LQFCuT75WbWU12Lu7VuuFu+MVaOK9k5Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4490d33e9a630df38feaff9768dc84cb_JaffaCakes118
Files
-
4490d33e9a630df38feaff9768dc84cb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE