Behavioral task
behavioral1
Sample
4696766245d52ed96b3a14623996e8f7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4696766245d52ed96b3a14623996e8f7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4696766245d52ed96b3a14623996e8f7_JaffaCakes118
-
Size
156KB
-
MD5
4696766245d52ed96b3a14623996e8f7
-
SHA1
0b194aeea69a0e28bf5d33ffb6e0c9e60202f92a
-
SHA256
11530ae346a6a2848d92adc18ad7aa4e4942b0c1d534e43d8430d123b29a069c
-
SHA512
adeb5ae70b58867ab626f3b75b426913baa855270406eacf93cc8e3d0863a1cb950ed3c54a6b67a1312f7b12af45dd7c527aae7310f560b75da8a93fa9e1c3ec
-
SSDEEP
3072:OoQLuTcSVG86KZabTYw+PEgsEwvx4nfbIn4//hTBf18xK5:OoQQiqZabqPEgsEwvt4//hTBt8xK5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4696766245d52ed96b3a14623996e8f7_JaffaCakes118
Files
-
4696766245d52ed96b3a14623996e8f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE