Behavioral task
behavioral1
Sample
4c4cbf6354f7672a52fce885ada8ee3b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c4cbf6354f7672a52fce885ada8ee3b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c4cbf6354f7672a52fce885ada8ee3b_JaffaCakes118
-
Size
409KB
-
MD5
4c4cbf6354f7672a52fce885ada8ee3b
-
SHA1
ca293912b19d6e4481cb1698b48bdbce8adb1162
-
SHA256
409778bd91770dbcc5e35cdc25f609f5cf062bf8b4adcdb59d3c2a76b56a68b2
-
SHA512
e59be6adee171a416469660f46a42ba38ea207fc0912c160f788bc8b364df733310a921ec0996c646da9f6a5aa3c5faadc2f3a2bda8e7bda107e29c8bb2dacfb
-
SSDEEP
6144:i8vX7+184Qc6Ea7Pm2vbwaxpHtwr/PCDqMpacTfciyikbp:lP7CFn4wajHtwr/qwcT9yikV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4cbf6354f7672a52fce885ada8ee3b_JaffaCakes118
Files
-
4c4cbf6354f7672a52fce885ada8ee3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 176KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE