Behavioral task
behavioral1
Sample
488baf1048acd45da99bc5e07e8ae030_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
488baf1048acd45da99bc5e07e8ae030_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
488baf1048acd45da99bc5e07e8ae030_JaffaCakes118
-
Size
727KB
-
MD5
488baf1048acd45da99bc5e07e8ae030
-
SHA1
fbbc20bfb56cee7def40aedf0dfd2d7759f72000
-
SHA256
bdb9fe9c15021fe4ea9ddc75ead8540d5089453889821a56da43e66fb31461b0
-
SHA512
a8cc3253c7c7da97e08705265dd193d6d71ac3de2a16e98e2fb770824731fc6dd25550d0365044a9f2a91b3171a3388b41020dcafe22b79d12e2dadb55c25a9f
-
SSDEEP
6144:3LVGuOqzmCX0+o2/eicvDntFuorwrko/+Pf0gtcAwZxzSMMixeDTdlSQ5M0hMdsJ:Bnmo0+o2/e/jrwZ2Pf2XxOfFnSAMB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488baf1048acd45da99bc5e07e8ae030_JaffaCakes118
Files
-
488baf1048acd45da99bc5e07e8ae030_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE