Behavioral task
behavioral1
Sample
46c7a04e9bf1fada4d632ed50ec36068_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46c7a04e9bf1fada4d632ed50ec36068_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46c7a04e9bf1fada4d632ed50ec36068_JaffaCakes118
-
Size
2.1MB
-
MD5
46c7a04e9bf1fada4d632ed50ec36068
-
SHA1
46c0a36cceb7c3dec42699ebd5fd95efcc50b2da
-
SHA256
c8cea9e0539c595de982bff5226f5eaa2907ffdc523bb9715b0a33a702b9040d
-
SHA512
12b7b96bb9759aecbda6dce2c007e379315082f3101ed57b5d3dfc87f689c44877aa00144b6592010e18a0027510ed3d16c4b6e18460b47c50e8fbcc9cfd945a
-
SSDEEP
49152:I1b7EHySyhM7ZWiA0ePU0mnvZpyxQv1eTGwMpTKoofS:Py5M7qPUvvZWVgvofS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c7a04e9bf1fada4d632ed50ec36068_JaffaCakes118
Files
-
46c7a04e9bf1fada4d632ed50ec36068_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 957KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ