Behavioral task
behavioral1
Sample
479b0e581a19a41618eb5e7311c55bfe_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
479b0e581a19a41618eb5e7311c55bfe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
479b0e581a19a41618eb5e7311c55bfe_JaffaCakes118
-
Size
1.1MB
-
MD5
479b0e581a19a41618eb5e7311c55bfe
-
SHA1
872faed72d1f9f56267b7a929f96ed3144025653
-
SHA256
d786545a762a1260e571af4aefc69654eb99b5d98fd9c737fe8110d8a4e03ad5
-
SHA512
b76648690d25f16fb8c29f6fb19a96da34d68579a54c1f87e5697c84dd7e4ab297470ba5fc40a08fa6ae128e0e38c31df6058fcff38de0bd2951cae68449e2d2
-
SSDEEP
12288:l0X2Pfh9qfJe3yqXa8Riz2bf4FRGOx/SMZoSFvBuBbGH:lsIfhcfw3yq9Riz2sfLMMLuu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479b0e581a19a41618eb5e7311c55bfe_JaffaCakes118
Files
-
479b0e581a19a41618eb5e7311c55bfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 480KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE