Behavioral task
behavioral1
Sample
47814998a6a2798486dfd19e5c985a07_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47814998a6a2798486dfd19e5c985a07_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47814998a6a2798486dfd19e5c985a07_JaffaCakes118
-
Size
239KB
-
MD5
47814998a6a2798486dfd19e5c985a07
-
SHA1
063df62c8d2d02b0216aa62d12a973ef2455257b
-
SHA256
27b23d17361eb22e91bbb91b6db0bef6e120d4294c04d2490a0ba719441efd20
-
SHA512
52849accdd88a7d39a2f45167c02e316e94c3ed2f1702dc22d46b08c0419a2fc40eae6127cdc49ac7a1a07162b8730e9df1e955bfc59d8dcd05845a66b142adb
-
SSDEEP
3072:tf2L25vAmRFZDqs4FFfTFaseeypjUyE6g8yuIaSiieSXwyuZe3auqiRtFo:XjDSTFaseeyBE6kuEoQZuagCtFo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47814998a6a2798486dfd19e5c985a07_JaffaCakes118
Files
-
47814998a6a2798486dfd19e5c985a07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ