Behavioral task
behavioral1
Sample
4827ea4d92c923dd6259cc6eea5add02_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4827ea4d92c923dd6259cc6eea5add02_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4827ea4d92c923dd6259cc6eea5add02_JaffaCakes118
-
Size
193KB
-
MD5
4827ea4d92c923dd6259cc6eea5add02
-
SHA1
5ff2635b9c20f8a577f4f30fc1d5b2de289bd6df
-
SHA256
2b2f327d17c08c9d20e1201de1c00de8d1ae716e7aaa9d03d4057a6bcd4ba6a5
-
SHA512
7c4fa880dc89d987d6e5e50b2a540e73176bf29d03a6646b0ebfd5706e1012d455ddfa4010e99d1b3d7b82c187c446a2f2706971d698e181902ec4dfdf8fa30c
-
SSDEEP
3072:H2LAYuJoPtzw2HWHVATMiFIpQXr6t5McaZgz2g0X:dJoPON1ATqWrkjT2RX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4827ea4d92c923dd6259cc6eea5add02_JaffaCakes118
Files
-
4827ea4d92c923dd6259cc6eea5add02_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE