Behavioral task
behavioral1
Sample
4c9d38f7946908c6e8b15ae92c569e39_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c9d38f7946908c6e8b15ae92c569e39_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9d38f7946908c6e8b15ae92c569e39_JaffaCakes118
-
Size
2KB
-
MD5
4c9d38f7946908c6e8b15ae92c569e39
-
SHA1
fdb7bc957f07b0a966757a0e19cb5bf38c656657
-
SHA256
169a1dda495c2fbf52fc293189deb60b3d5d45beafddac039838f0e6150b40f2
-
SHA512
6adaf52502dc87c8fd0a1e3aa88f6a1fa0cbfa54d04d848085b49c9922b8884eaaa7b0a2e59276dbd701bd97cb22581cca2d0757b9a3d507edcc1dfe1e6c3ae5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9d38f7946908c6e8b15ae92c569e39_JaffaCakes118
Files
-
4c9d38f7946908c6e8b15ae92c569e39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE