Behavioral task
behavioral1
Sample
4a9291a7392029e7581927d9a3a910c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a9291a7392029e7581927d9a3a910c2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a9291a7392029e7581927d9a3a910c2_JaffaCakes118
-
Size
227KB
-
MD5
4a9291a7392029e7581927d9a3a910c2
-
SHA1
842c20d4c31963741255ce93c27417c441e6aa30
-
SHA256
cf95da950e7d0aa73c58974ca4056cfe6c96a7f244964a624366a3e05f099fa9
-
SHA512
c6f9f7227136dd0681f5ebe0506df399105fae4aa04803223fd568cdde9563e4fae19fcafd3635c2f18b3ad6270dc1184837df6597b5a3049d2255c8af2c6505
-
SSDEEP
3072:Ubkvb4IXTLPOvpB6JV+iEAR5NNsIpYqp9zT60Kn51EEWr4jovWkE:YkUIXTT+iEAR5NNseRU0K51EFGxkE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a9291a7392029e7581927d9a3a910c2_JaffaCakes118
Files
-
4a9291a7392029e7581927d9a3a910c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE