Behavioral task
behavioral1
Sample
4b5a92d1d859730d945474ffc3d2e8ae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b5a92d1d859730d945474ffc3d2e8ae_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4b5a92d1d859730d945474ffc3d2e8ae_JaffaCakes118
-
Size
6KB
-
MD5
4b5a92d1d859730d945474ffc3d2e8ae
-
SHA1
63e7524bea5e3a240ac32ae0a6f6d366c9060ca9
-
SHA256
c406b52e87eb9a1d5b600eb39a3a3ef9f2b4e5d766d5a494caeb7f916d48e168
-
SHA512
d59f573c10a304809d3200bee042195f93d783c14f03081b90bc5ee478858015bff6784ace93e26ee2f83a053a486df42ec8b07c5e072487405c89da95b4165c
-
SSDEEP
96:nP+VtLCPAiobidEhyXQieu5LHSWmy0vhlUvd6cVOC0JaT6lrUY7IgO5M7Zi:n2VI0yXPSWmDbaQkOC0cTOrQ/gZi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b5a92d1d859730d945474ffc3d2e8ae_JaffaCakes118
Files
-
4b5a92d1d859730d945474ffc3d2e8ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 406KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE