Behavioral task
behavioral1
Sample
488715bce6665aeb1d1c30a4d9cd9c95_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
488715bce6665aeb1d1c30a4d9cd9c95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
488715bce6665aeb1d1c30a4d9cd9c95_JaffaCakes118
-
Size
21KB
-
MD5
488715bce6665aeb1d1c30a4d9cd9c95
-
SHA1
d523ebdaf3fb56fde2f6443d2867605674008c6e
-
SHA256
d52e86e662e83f4d5a87c2e017b1c9773dc841596cb73da1718ce1fb6ce83d83
-
SHA512
7b65d1059f5acdf51f964e550d22bf20829d020c9881742366faf1d81e4cc2b6ab624d4f07de9766d4290e6d6b9737a127aaf99c0f1d5c56ca3297f603425ee4
-
SSDEEP
384:FLrxYNliDIQo5tl+KJazqW9w1pTEyWDL+yPawMaHfwAjIlFm4F4KxAm:FLwsoBJwqW2P4DL+yyGH9+FhF4KxAm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488715bce6665aeb1d1c30a4d9cd9c95_JaffaCakes118
Files
-
488715bce6665aeb1d1c30a4d9cd9c95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE