Behavioral task
behavioral1
Sample
4bd689eb4ea04de60ad7367d1c2470ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bd689eb4ea04de60ad7367d1c2470ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bd689eb4ea04de60ad7367d1c2470ce_JaffaCakes118
-
Size
140KB
-
MD5
4bd689eb4ea04de60ad7367d1c2470ce
-
SHA1
93b3f5f6d7121f8e9e29acfa0145891fc1945f60
-
SHA256
af13e47aad5568d5fc25aac96031c3883614fe74d089b5e89e098ec23a94a2fb
-
SHA512
a2c56b43cab58f9d6b4d34164e1c548a8462eab6e02abece36ae41ed91324a8c094fd5c6c7f8ab6be9d6def3b91fd215f54f946fb39b0ea9332804b20c0507c8
-
SSDEEP
3072:Omw9TewTIsvPYWM9rELKiTNvsAgb2uo6XoUesdsdVwuXIk9AK:Oawd19KoY4UesdsdVwuXb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bd689eb4ea04de60ad7367d1c2470ce_JaffaCakes118
Files
-
4bd689eb4ea04de60ad7367d1c2470ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE