Behavioral task
behavioral1
Sample
4cf0ac419b21d286f9254d6ae894f469_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4cf0ac419b21d286f9254d6ae894f469_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cf0ac419b21d286f9254d6ae894f469_JaffaCakes118
-
Size
189KB
-
MD5
4cf0ac419b21d286f9254d6ae894f469
-
SHA1
5d938b769022a11a30b08a05f301ac6d1fe49508
-
SHA256
91769556c9a9a5f713656648b417480f71ea401fc99c1051c3b63547e8879e1f
-
SHA512
978d4648d02bac24686dc47209d18915baf9f667b1f9d5d87050de3da0adb1953dd5e33c47f80899317bc7bf8d12a76772d8130c9a37ebba389b3916542797da
-
SSDEEP
3072:EyN5xs8ySjgq1bOhTCMQjqkg4+OW//CJLXBQcle3wAbA4pZHygDhbq+kF/+AoWS4:Lk7q4hpQjSYW/MtDegADpZSg1eaAoWS4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cf0ac419b21d286f9254d6ae894f469_JaffaCakes118
Files
-
4cf0ac419b21d286f9254d6ae894f469_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 922KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE