Behavioral task
behavioral1
Sample
4d228fb921d9c284ecfb4befe93312ec_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d228fb921d9c284ecfb4befe93312ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d228fb921d9c284ecfb4befe93312ec_JaffaCakes118
-
Size
465KB
-
MD5
4d228fb921d9c284ecfb4befe93312ec
-
SHA1
1a8086e9fad0d75359b6a842a8a2f54e2360d978
-
SHA256
ba69a723be7fe9bd70348d922c54bf97ecea7f02618b053fb165bb42d7082cdd
-
SHA512
8c21047d2a08d9c6502b27ee70e8b8e5fafcc6e3d68c1905648cc8ded73efa30fdd974ed9637a4f382e9c2a39d18a0a9a226e65e10760ab5677e7b5e6891e213
-
SSDEEP
12288:WATEooMqY+w/QS6un1bs/958FftY02JJnBm:VT9CY+w/QSVn2158B6g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d228fb921d9c284ecfb4befe93312ec_JaffaCakes118
Files
-
4d228fb921d9c284ecfb4befe93312ec_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE