Behavioral task
behavioral1
Sample
4bb304b3ffaccb29b051614a4f7f8684_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bb304b3ffaccb29b051614a4f7f8684_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bb304b3ffaccb29b051614a4f7f8684_JaffaCakes118
-
Size
73KB
-
MD5
4bb304b3ffaccb29b051614a4f7f8684
-
SHA1
1abccb13a956523f92eaecd00eaee894e4f39bc5
-
SHA256
b86c24117ddb4832e22dc31c3a0f0bd4993b7975636a7a29996fbad83ede9f0a
-
SHA512
6c9adc829dddfeab3c99d236e30047bc842a5504b02e39d61f17a563cdd00c1d8a176ba7c775f9ca92c3cadf0f8f88023643b88fd1e6c012d0832da0ff990f31
-
SSDEEP
768:RQdJZW5NKRbBCDzKPPu+Lc3DtY2FgvknagHWvJhSs1ER63sADKJmNcY8Ch8aT/My:wXK5zqhdvYap73OoDWFGSSrqvCb17
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bb304b3ffaccb29b051614a4f7f8684_JaffaCakes118
Files
-
4bb304b3ffaccb29b051614a4f7f8684_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE