Behavioral task
behavioral1
Sample
4a7579b4238d72043f3addce4b5fcfcf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a7579b4238d72043f3addce4b5fcfcf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a7579b4238d72043f3addce4b5fcfcf_JaffaCakes118
-
Size
68KB
-
MD5
4a7579b4238d72043f3addce4b5fcfcf
-
SHA1
39a5665bde8af81da3b48d2b1edbed759ed8943b
-
SHA256
9cdd4c5e62a10dfc33237206d0a7f2119ab6a785bf39e023a42bd472ae5e89e3
-
SHA512
dd14eab26cd24d84d545ba2c87ca3c0856897a8c5fab83bac17a27323e45e973d754b19765fb49c3888d600bae90652d7b830db0828c5d4832967cd72c047f50
-
SSDEEP
1536:mmoLtq4gBB95p35sp+MdGV3R6TmFAh8EO:w+Bv5pJa9y8h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7579b4238d72043f3addce4b5fcfcf_JaffaCakes118
Files
-
4a7579b4238d72043f3addce4b5fcfcf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE