Behavioral task
behavioral1
Sample
492492e6389a722aaa9501888f8d3466_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
492492e6389a722aaa9501888f8d3466_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
492492e6389a722aaa9501888f8d3466_JaffaCakes118
-
Size
144KB
-
MD5
492492e6389a722aaa9501888f8d3466
-
SHA1
ac4efb1f7ce24ff5992065e9e86e96a7a788657c
-
SHA256
2eb4153227c554f727f778d2145f5452551acc11c53f3ae52a1b08d8112d228e
-
SHA512
0508a79d672979bdc980572db6f1283d61afd54b844413d040a0fc4d9dd8afcc5d73aa5f5427bd8063000d4b8fc7b2a955a181159d716ee62a157323877b3784
-
SSDEEP
3072:WB1P/rIpkAMDRQ14+FDFk9sp31Ys10Yv:WBx/spkAMDRQ14+FDFk9spKsuY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 492492e6389a722aaa9501888f8d3466_JaffaCakes118
Files
-
492492e6389a722aaa9501888f8d3466_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE