Behavioral task
behavioral1
Sample
4c8de1552b0e676caa2ec3b57e577048_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c8de1552b0e676caa2ec3b57e577048_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c8de1552b0e676caa2ec3b57e577048_JaffaCakes118
-
Size
5.3MB
-
MD5
4c8de1552b0e676caa2ec3b57e577048
-
SHA1
6c5e84d7a93c75e611f8502e0fb89c1ee4f0a111
-
SHA256
779103fdc84fcc08e6b798664fea0284f6ec8126d280dbaa1d954f634d0c40fe
-
SHA512
6aacbd86e4c725493f032f712831162062b2e1ec8e21577617279a83b9e8f74857337ecb48cbc18f38ff46899450fec1a28643660b0e3ffe6e98b5bc9dd363da
-
SSDEEP
24576:A2Y6fkQIN8W5QcXE1fX38thpW46IP83t6TJleCzc8p4j1ifNhSk:dSt0n8thpWv6lleCw8mIfNhX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c8de1552b0e676caa2ec3b57e577048_JaffaCakes118
Files
-
4c8de1552b0e676caa2ec3b57e577048_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 880KB - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 550KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE