Behavioral task
behavioral1
Sample
44c9a8ae65a5aafbc7c7f4d2182b5ddb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44c9a8ae65a5aafbc7c7f4d2182b5ddb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
44c9a8ae65a5aafbc7c7f4d2182b5ddb_JaffaCakes118
-
Size
17KB
-
MD5
44c9a8ae65a5aafbc7c7f4d2182b5ddb
-
SHA1
832e32807e584dd85a5cda18a0a694e82224705d
-
SHA256
4236dfb27ad60cec413c5cc5ad6c2717633a0d2a0cf6e86ab3cd1ba26b453323
-
SHA512
bc336d0afba5807e9c2b34b9dfafcb22ef58136571292802b0920fdb2014cc34a165067f65364286f9331e22c50f85fffc3f853c6551567d37f30cec4b8d7d94
-
SSDEEP
384:A5dkzXW/9wXyk1vDQqESbLFr/+Z/3KA/+:SiXW+XwEJLAr+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c9a8ae65a5aafbc7c7f4d2182b5ddb_JaffaCakes118
Files
-
44c9a8ae65a5aafbc7c7f4d2182b5ddb_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE