Behavioral task
behavioral1
Sample
455374875db378930c46822a80347a4f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
455374875db378930c46822a80347a4f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
455374875db378930c46822a80347a4f_JaffaCakes118
-
Size
241KB
-
MD5
455374875db378930c46822a80347a4f
-
SHA1
e4888b3d0dda73a5131ead6df147db11783c5655
-
SHA256
9fad4d5cf4bbc65acd7d220c3e4dc63125b1c2bc4f30c23185f6559df40c75b2
-
SHA512
a17b1058eb520d5779966eac0bc87d24da2ff9f014ea1da8ba5cb7067ecb50d3487580ccfa9b7a806dfc0d97641bd9ad7dcb35aa308f41a9acd1236ce248edf5
-
SSDEEP
6144:Eal0io0bAKxFnv8IB6UfoJWHE7mSyYwK/LE1cACTh:Eal0zMAmBfoJPmSfW1kh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 455374875db378930c46822a80347a4f_JaffaCakes118
Files
-
455374875db378930c46822a80347a4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE