Behavioral task
behavioral1
Sample
498c77a91190b032341dd265794aea13_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
498c77a91190b032341dd265794aea13_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
498c77a91190b032341dd265794aea13_JaffaCakes118
-
Size
399KB
-
MD5
498c77a91190b032341dd265794aea13
-
SHA1
68ef3cfc3a8d26ea9e2b1f6e6dd85caef970642c
-
SHA256
7d45643ac134d1c7bda1ff226d91182e0f78eb6ccc189a9f5aab8aaecd1a57bd
-
SHA512
2aa3c889ab38572a1a3ca13baec25ae3cc1ece953a62cbd07f40cb1fa645a545d533d7cd8a0191a2ecf7bebec1073e9a4ca3df1a4840ae9da50f0a9880a370fb
-
SSDEEP
6144:eF/7mWcn8VAmNA3/sXkRIYXao3RsBP9Nnc6x9ekfCq6vAEHv/eN:Y2x/arYXaZBFpprM9vGN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498c77a91190b032341dd265794aea13_JaffaCakes118
Files
-
498c77a91190b032341dd265794aea13_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE