Behavioral task
behavioral1
Sample
4603ed048ccb8f1d26896e289566020f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4603ed048ccb8f1d26896e289566020f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4603ed048ccb8f1d26896e289566020f_JaffaCakes118
-
Size
6KB
-
MD5
4603ed048ccb8f1d26896e289566020f
-
SHA1
1e478ed309c912c6b10a7f95f31cc65a8de8c50d
-
SHA256
c0f16e850d3c991e1fdfdf003b1fa170256320a83588706834aae8efdf00f85a
-
SHA512
26fb6da7c072d757f800d60fd513f2e71bddebe6057f1a1840807075535b13cd6d5850af611a499177a6ca38c45dc4c7224aa0fa0933fd5ab1ad4bd320f29566
-
SSDEEP
96:8xl+2WDXULg97IoPKEgEkesnPWFRYHBdVOcyH:8x82OpRIJEgZObUBeH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4603ed048ccb8f1d26896e289566020f_JaffaCakes118
Files
-
4603ed048ccb8f1d26896e289566020f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ