Behavioral task
behavioral1
Sample
46603f544fd41039132b2ec1b83b9801_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46603f544fd41039132b2ec1b83b9801_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46603f544fd41039132b2ec1b83b9801_JaffaCakes118
-
Size
469KB
-
MD5
46603f544fd41039132b2ec1b83b9801
-
SHA1
d4a605e0233188a4db4937bc60f68b181c7e9710
-
SHA256
1aa4695aea5afbb799a844d1ab166a82934622a114bf743366648e97e0753c8a
-
SHA512
0ad8baf61d51a324990394ced7f905411a375c62b9f9a3159c97f42013d2d13d5252d1bb454800c63eafa192f8581c4e1e0ba9bd07a28ae75d75c0b0837e0804
-
SSDEEP
6144:i4Dhp1HC0xkPYrNTwSYgtrkAupHqDqiSjDI:fhO0frNUSraAJSj0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46603f544fd41039132b2ec1b83b9801_JaffaCakes118
Files
-
46603f544fd41039132b2ec1b83b9801_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE