Behavioral task
behavioral1
Sample
4620fd0cbae07819d85321105bb98c3d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4620fd0cbae07819d85321105bb98c3d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4620fd0cbae07819d85321105bb98c3d_JaffaCakes118
-
Size
1.6MB
-
MD5
4620fd0cbae07819d85321105bb98c3d
-
SHA1
e93dbd157468cef5fb159c8b0faa2f334c9d112c
-
SHA256
287a9f8de198190615c6bec76a5a84938c82430ee1cb1b24f6dedd65ff5f881c
-
SHA512
ff2e7814d4650963fb919d9414d4a352bd3d214a830de1b0d4e53621e04e64cb1e5267e899e973479b81bc1e5294f2e1f5ebb881844d3c2171737944a32d1112
-
SSDEEP
24576:JGznvsLdFx+GJ+C/qCs1jGznvebctQl50Y0aGznvmeVCqLr:7dbsz57OYG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4620fd0cbae07819d85321105bb98c3d_JaffaCakes118
Files
-
4620fd0cbae07819d85321105bb98c3d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 362KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE