Behavioral task
behavioral1
Sample
46d923d0b4599fa0bd82178d071ffdd9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46d923d0b4599fa0bd82178d071ffdd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46d923d0b4599fa0bd82178d071ffdd9_JaffaCakes118
-
Size
177KB
-
MD5
46d923d0b4599fa0bd82178d071ffdd9
-
SHA1
06a4e36cf8fc862faaadc573476791b1e0418380
-
SHA256
bceae0d7303778627fd9b64125cbf98323f453fb1949c1c6bf13458bff357fb6
-
SHA512
bc90b4d494d59ed5af175a7e8a2bb4080c72a0ecd6d924c8593852c15c847a528dcd13230e5c1b8b4c6fc58087534b954e6bf0404c248e728962ea3737d31f6b
-
SSDEEP
3072:9q/g6bpDYEdyHH87LU2k/YSrJYCBgc3r3wosn3DSOwc:fOYEdyncNkzrJYCBg83wov
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46d923d0b4599fa0bd82178d071ffdd9_JaffaCakes118
Files
-
46d923d0b4599fa0bd82178d071ffdd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE