Behavioral task
behavioral1
Sample
4a70e8c1b5c3ce1bddbc798dc19f5ef6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a70e8c1b5c3ce1bddbc798dc19f5ef6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a70e8c1b5c3ce1bddbc798dc19f5ef6_JaffaCakes118
-
Size
289KB
-
MD5
4a70e8c1b5c3ce1bddbc798dc19f5ef6
-
SHA1
066950f4115ac42a7e29d271f1998b5813f4569f
-
SHA256
de4da920b29528f1985bcb22cf520a0c2560a0c0b4f0676d37102db8c5a4f4fe
-
SHA512
98f84bb7fcee204a7b03ee6acc759e68691b9e8e55654c8dd5758757351f9eb64bfcf551cfc2e8bde759946d32ea5e6bfd910b4b7987f6c12172e2793a11d3c9
-
SSDEEP
6144:uVAAs607ZgtDAocmAxsPgUGAT85yCQYOzbcgPBniBTSGT/bufLTo:u46JtDA9v9nLlmzYg5niNXzufXo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a70e8c1b5c3ce1bddbc798dc19f5ef6_JaffaCakes118
Files
-
4a70e8c1b5c3ce1bddbc798dc19f5ef6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 572KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE