Behavioral task
behavioral1
Sample
49cd1dbf2b12a33474969227a441ce39_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49cd1dbf2b12a33474969227a441ce39_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49cd1dbf2b12a33474969227a441ce39_JaffaCakes118
-
Size
137KB
-
MD5
49cd1dbf2b12a33474969227a441ce39
-
SHA1
1f9a39a23887874247f16b5f704e78ac95898485
-
SHA256
492c9dea46bf4475a79c55f6f183ceb80ad433c25aff742d0f50cdad4df30491
-
SHA512
70eecdc74249d8cd104602bafb611454be650f4c7192802bd0c96820f1c4f53274e3fc95f708f04df60f00abd3eebbedd85ad1f70ed15bbe95a2d4594956ba9b
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53Wm:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49cd1dbf2b12a33474969227a441ce39_JaffaCakes118
Files
-
49cd1dbf2b12a33474969227a441ce39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE