Behavioral task
behavioral1
Sample
4c49e24c8a52709b8221015f37038780_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c49e24c8a52709b8221015f37038780_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c49e24c8a52709b8221015f37038780_JaffaCakes118
-
Size
185KB
-
MD5
4c49e24c8a52709b8221015f37038780
-
SHA1
509ccac4469ea77a6bece83c80f9fecf25c8ad60
-
SHA256
47cd90bbb2f6755a54bc241a86ff63d1f4c3e4d2702b190f9d39d7a088cfebe6
-
SHA512
5e2d2188d992d4f0917610c7db5c94d50d0f13c2cf084760b2dab3a6d7ac06887d5b3718b1b658d3a1acf6fe258f9d1e797514988808823c2ee9222d7372b09f
-
SSDEEP
3072:mSGWN4CMcf1RHuhV6+o8+vtYN28yCqx8KDCgioq5xF2cGANWeGn7G6DaITLXTb/L:1GTcfD2V6nVYNIx/pmn2QgG6DVf3/ez+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c49e24c8a52709b8221015f37038780_JaffaCakes118
Files
-
4c49e24c8a52709b8221015f37038780_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE