Behavioral task
behavioral1
Sample
4aa00e34a338093ce8dde726d2e89e17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4aa00e34a338093ce8dde726d2e89e17_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4aa00e34a338093ce8dde726d2e89e17_JaffaCakes118
-
Size
563KB
-
MD5
4aa00e34a338093ce8dde726d2e89e17
-
SHA1
8db3ac9d4f0c9e9e947c9264c8fcfe6846a3fb52
-
SHA256
2bc6f3ab7977c89d88245f75bdefa715e5130a0692630be7d33eea07eceb905b
-
SHA512
4007986d6319ef434ab56e5c2d68f0ea386d5c8c9a954cbaa41c3c4d04feccd8f7d361962f8d8a48ab5c6692ab2d01fe2073396f3c30be9c83307adc05de19e3
-
SSDEEP
12288:oEcUkmqm1K7vGXjBxoOR8D4V/hhnl3d6EyMDr:/cBK4vGT8O3/GVM/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4aa00e34a338093ce8dde726d2e89e17_JaffaCakes118
Files
-
4aa00e34a338093ce8dde726d2e89e17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE