Behavioral task
behavioral1
Sample
4b4924a60cd4ab0a83641436e5f0c98f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b4924a60cd4ab0a83641436e5f0c98f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b4924a60cd4ab0a83641436e5f0c98f_JaffaCakes118
-
Size
266KB
-
MD5
4b4924a60cd4ab0a83641436e5f0c98f
-
SHA1
e21126d922f6ec00706583e193691fb7480e6a45
-
SHA256
eedc39abcd33f2891dd9c2b485f028419c64df7944fb4772a58e2ac93e734232
-
SHA512
0a6f565fc8f4edf565fc4991569bbf84252a4d76303c52b3597d161d4da907c951b517733ecbc788a480f8e8861c9644acfa149aa90b372e8888c4a9d3966efe
-
SSDEEP
6144:nBiEjmpPGM9MT+lzmAce1j291y5rFXXA6/Q:nBhipGD8Lfjo0tq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4924a60cd4ab0a83641436e5f0c98f_JaffaCakes118
Files
-
4b4924a60cd4ab0a83641436e5f0c98f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE