Behavioral task
behavioral1
Sample
49a4e7c5864c0f791ac7939123731f59_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49a4e7c5864c0f791ac7939123731f59_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49a4e7c5864c0f791ac7939123731f59_JaffaCakes118
-
Size
948KB
-
MD5
49a4e7c5864c0f791ac7939123731f59
-
SHA1
0a6df6caa88947b0515b2ccffceb3c175e3bda01
-
SHA256
974475d5e9c93a5b62a967cb9d05d4a5e4bc0c4183f5e49554d225188ea6845c
-
SHA512
dd8549929e873fdeebe629a71da2c3c7d2d8bb305f76f06037c3ed656530da044ddee04df03e20cdd49b2371e371d71dcd483084d4e13e879906277d2280ba0a
-
SSDEEP
24576:fAqgO02ANrcbAv2eEJuobK7aC6yapuoa:Iqh0nrcc+eM/NP0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49a4e7c5864c0f791ac7939123731f59_JaffaCakes118
Files
-
49a4e7c5864c0f791ac7939123731f59_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE