Behavioral task
behavioral1
Sample
48607d57f8614b5ad4428fb69548b165_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48607d57f8614b5ad4428fb69548b165_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
48607d57f8614b5ad4428fb69548b165_JaffaCakes118
-
Size
1024B
-
MD5
48607d57f8614b5ad4428fb69548b165
-
SHA1
b8f476a20af4406a1559b697157854bb5a7e8246
-
SHA256
4c0d4b7204c88ce13162e548885e270f73e290cd507535efe7dcdfc96f78d60b
-
SHA512
b67fe838ab37d4ce1fc8903545f8e09257272c0b78e5f181885b9a19c5a70ec1d8ed44a1c61da4dc2a04b195babcd888be8bdd5317cedac351458a398a873029
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48607d57f8614b5ad4428fb69548b165_JaffaCakes118
Files
-
48607d57f8614b5ad4428fb69548b165_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE