Behavioral task
behavioral1
Sample
497a7b7cae5970744e19a3276a3235ba_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
497a7b7cae5970744e19a3276a3235ba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
497a7b7cae5970744e19a3276a3235ba_JaffaCakes118
-
Size
119KB
-
MD5
497a7b7cae5970744e19a3276a3235ba
-
SHA1
c93ac9bb0d2ee499833eae7abe0b219dc251b0c7
-
SHA256
8f71e288653071cf4093db1fe8ba6e9a45945c4f5d6bf9d0fdea7555d08f77bd
-
SHA512
9b4d170814eef7dfd2c8dc935069c5f16e3df8b24795ccd6cd6648bba1e6639e0f18aece665bea7c28d859d6be4a6fa14662456402a41f768e4ce2133b545fb6
-
SSDEEP
1536:Ear9nfTu6Ie5Q8/T8v1dCQIgd54vJ6UJ:E6f6I5Qq8vyy7K6UJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 497a7b7cae5970744e19a3276a3235ba_JaffaCakes118
Files
-
497a7b7cae5970744e19a3276a3235ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TNT Size: 14KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE