Behavioral task
behavioral1
Sample
4af8627ea6e96c259f09ab3e9dca7169_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4af8627ea6e96c259f09ab3e9dca7169_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4af8627ea6e96c259f09ab3e9dca7169_JaffaCakes118
-
Size
35KB
-
MD5
4af8627ea6e96c259f09ab3e9dca7169
-
SHA1
8ded4d64498d08b353f4e70d12a45a8d9185a07d
-
SHA256
d55d753a2deff65406ae37b4fb25d2a0b269903ec12b14e02b94c66b34d4f873
-
SHA512
7432f6bfad3caf05a554673fad083b97c70e122cae0c7ef9d6fe255f67b216c5ac6f80f371ba4e1f0fedf756eb9b42aebc2390abc645283843701c681bdd067e
-
SSDEEP
768:TiLpkUayTR2hPmBUDehFO5Ozy5ykwQlNDlp/L48mnOY:2Lpb24BJME4y+lNlpkL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af8627ea6e96c259f09ab3e9dca7169_JaffaCakes118
Files
-
4af8627ea6e96c259f09ab3e9dca7169_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE