Behavioral task
behavioral1
Sample
49d0cc31c7b0ba1cfbe43fa045b515fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49d0cc31c7b0ba1cfbe43fa045b515fc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
49d0cc31c7b0ba1cfbe43fa045b515fc_JaffaCakes118
-
Size
10KB
-
MD5
49d0cc31c7b0ba1cfbe43fa045b515fc
-
SHA1
441f618d723cef46ef6489f900b8b44351be416d
-
SHA256
147b394d03bd7dd1b9a2ec10cfe046ef1d34597dfad9cc1fb758be32714403e6
-
SHA512
ea7f5e74c4bcc8fcfae404ade8ee545f1db28cc9730f03d3e6a07e7fe8af2d0a719f5b3dd8f09a323ef238974b05b5d4edd89a9dacac022a5e8d14ddcada8dab
-
SSDEEP
192:fk3kDV0CxOR3xG8OYM6B9eI52x1ZFxSbHpAz3NXnXWM+9jZkkkyabKHRqfO:fDV0Se3wa9e0sZ3S9IXGMSkskW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49d0cc31c7b0ba1cfbe43fa045b515fc_JaffaCakes118
Files
-
49d0cc31c7b0ba1cfbe43fa045b515fc_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE