Behavioral task
behavioral1
Sample
47cce9669e30cae5a9a5e97d3feff108_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47cce9669e30cae5a9a5e97d3feff108_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47cce9669e30cae5a9a5e97d3feff108_JaffaCakes118
-
Size
57KB
-
MD5
47cce9669e30cae5a9a5e97d3feff108
-
SHA1
c33ff0c72a5e171ccb9a454fef59307930b48d87
-
SHA256
992e9f0cb309b7e656196860d6c7d3970eb69839dc47e757de0d755ca7a2011c
-
SHA512
b141407c9ba6a3315822e5ef9c9fc872186e6f98153635e36b848a31ce384b45f0e78fa0a4c4b7b7ebac90f0865df7fbed6a6e1515f9fde6eacf60c145e8c94e
-
SSDEEP
768:TsboeblozOtvdnHmw8g1bC3gXNii8fyQzVO6wcMrIXI42yqNB44/ZfYtIaWiW/1j:w3t1+QR8f/hOOjXD2/RhfGUlYTUn/R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47cce9669e30cae5a9a5e97d3feff108_JaffaCakes118
Files
-
47cce9669e30cae5a9a5e97d3feff108_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.excode Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE