Behavioral task
behavioral1
Sample
49725277665a48df4fb3a7523f99b95e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49725277665a48df4fb3a7523f99b95e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49725277665a48df4fb3a7523f99b95e_JaffaCakes118
-
Size
269KB
-
MD5
49725277665a48df4fb3a7523f99b95e
-
SHA1
f08ee97b5a83e179ff45b38cd78b9824edccb356
-
SHA256
908c371ff2bf11ec4a6e2fbfac0628c6c6a0e45622a3a72fa14e190f9427362c
-
SHA512
6db379cc1b94df4beb8be060ced543645eb07ed3329b86cb3a32cee1b8536385a92d689422879e20b98f71c35950796924fd012c11887fd25052eb1619978856
-
SSDEEP
6144:sCCEZBKePXkMBFrD7ODZJ/dEPJJWSTDwqwxLWjylgvFqoSkD:sw4b0r8J/dIJJHlSXCgoS8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49725277665a48df4fb3a7523f99b95e_JaffaCakes118
Files
-
49725277665a48df4fb3a7523f99b95e_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE