Behavioral task
behavioral1
Sample
4520f0d99b450bd129f41ec4f91bb4a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4520f0d99b450bd129f41ec4f91bb4a0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4520f0d99b450bd129f41ec4f91bb4a0_JaffaCakes118
-
Size
35KB
-
MD5
4520f0d99b450bd129f41ec4f91bb4a0
-
SHA1
becd5b717de9825cd06fc2c3cec7fa5ac7588f67
-
SHA256
43827f9e4c321ac1d89498c272aa5dec37842d6519b3b1280c65d776ee75c78d
-
SHA512
127ac925fc49579f87a7aac67de955b17a22233d48dc42676cb59705ca0a8c170acdbe4318fab2507af628e7d840d410df1a2c46231688abef7b3e1463fdd993
-
SSDEEP
768:LP5QYy557QrWGNoA7TiPvZYxJy8Um3dnSOUBWlGhb6N2bjpqpYsP3:iZv7qWGNDkvqLyCeAlaOziI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4520f0d99b450bd129f41ec4f91bb4a0_JaffaCakes118
Files
-
4520f0d99b450bd129f41ec4f91bb4a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE