Behavioral task
behavioral1
Sample
4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4609a1fd225b1170f06c8c52f00caead_JaffaCakes118
-
Size
165KB
-
MD5
4609a1fd225b1170f06c8c52f00caead
-
SHA1
b622c9090f7377492f2eb8a5dc2439da0b4de7fe
-
SHA256
fbf394aa38a544af667d6f8ff2c5ae655335b863fbd3bc9f29f17034037f8625
-
SHA512
d28ccddf2647fdaabe5a68f52b0f452d2ad524d7545e9606262addb3d0b80efd4ecdecb5fd4f6c34344bbfd39ac7181925c604756280bab3b55a320e827f0ebf
-
SSDEEP
3072:vE7MPKkTWd7TyXA05h60EvNb3k06MOepRhc8DdiDqT/:vE74KYWRo40E5KMOepzDHT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4609a1fd225b1170f06c8c52f00caead_JaffaCakes118
Files
-
4609a1fd225b1170f06c8c52f00caead_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE