Behavioral task
behavioral1
Sample
49154edf36a70a4630a47ec7c01cdba7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49154edf36a70a4630a47ec7c01cdba7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49154edf36a70a4630a47ec7c01cdba7_JaffaCakes118
-
Size
199KB
-
MD5
49154edf36a70a4630a47ec7c01cdba7
-
SHA1
af3c321bbb0e6ed939eacc661ba50924ae3d0b48
-
SHA256
239bf60c6382e8167950768e7c72505d4b3b367d068f58990e2baf7239289843
-
SHA512
320003372627bde02f0588c412ac41fadaaaa8d9a191607c7bdedbfe2296c34ee9809d37ce43d0484a932b6615ae004a5ab6806ca9c3103d163534bc7f46686b
-
SSDEEP
6144:JXWXm3cD8JkWbOdQGhDt8VMGMlGog2Q8qoSIG5l:UhDYkWbgQADtdGDWqoSHl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49154edf36a70a4630a47ec7c01cdba7_JaffaCakes118
Files
-
49154edf36a70a4630a47ec7c01cdba7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE