Behavioral task
behavioral1
Sample
4a8b006589077b59a714ae23c4ae1819_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a8b006589077b59a714ae23c4ae1819_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4a8b006589077b59a714ae23c4ae1819_JaffaCakes118
-
Size
441KB
-
MD5
4a8b006589077b59a714ae23c4ae1819
-
SHA1
3b252033534978d87bc70475e10d6552ab557461
-
SHA256
72c4ee1650df0573e6626d59c2addca330d44317308f2bbc4736eb67be288331
-
SHA512
f80a38bd2a69bfcf47c97ad872147e2289f0c6c7a152dd2a497ca6bf4c9234efae3f7c9acda3f6f68f718a534879932c68e4361a8c1f38f9fc33604428417cbd
-
SSDEEP
6144:hnwyEz0wP76hpRLpGthHXQK79vxZOrra4x/SMnEW/lJA/PyDx:hwyEz0wPMRtihvrO/DnPue
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8b006589077b59a714ae23c4ae1819_JaffaCakes118
Files
-
4a8b006589077b59a714ae23c4ae1819_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE