Behavioral task
behavioral1
Sample
46037555b006aa498c6aa506b772cf42_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46037555b006aa498c6aa506b772cf42_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46037555b006aa498c6aa506b772cf42_JaffaCakes118
-
Size
315KB
-
MD5
46037555b006aa498c6aa506b772cf42
-
SHA1
f5e5074fecc7c39a175e10681b6b03324e4b1cd1
-
SHA256
b3b4e8c9edc441096ccd4b227fb61420f829e92afe1c6d65ec293670fc37c977
-
SHA512
de93e6998f46d14e6bd5923dbe3fa2d7b45d7c83a3001565c1fb43ee3b166f85abd40813c8affaa3de5f10beaa622d100e472d1a90a4c4564bb1ee48994583a4
-
SSDEEP
6144:e9n8SYDQEpwuYb50r2JfBIylSfEPX9ZhgiUJ3wBk0FPe0lzyeG:eDYDDCUrEIyUETSie3wBv8wme
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46037555b006aa498c6aa506b772cf42_JaffaCakes118
Files
-
46037555b006aa498c6aa506b772cf42_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.guruX Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE