Behavioral task
behavioral1
Sample
4d12852a93c3dbd9d7081e5aba3805ed_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d12852a93c3dbd9d7081e5aba3805ed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d12852a93c3dbd9d7081e5aba3805ed_JaffaCakes118
-
Size
463KB
-
MD5
4d12852a93c3dbd9d7081e5aba3805ed
-
SHA1
60d4ebecf8799181be91bd504f17deac590b8274
-
SHA256
fae3b036769d5383550848bf1a23868d1042ebc98751c2e5dfb2a133c1f55f3f
-
SHA512
3f4363396940e7f0367746e41261b6423c20c7489fd35e19cdcfd18963fd41645000925de9e77693b75030e1a9bdac556c38c025ffe7461db32af2ff223a6a3c
-
SSDEEP
6144:FO1p0kGu0G1mEHwqE0lq9VCymHwhlENgvhsYK5pI169GoKU6Y:4p0zur1mkwqEz3VmCmNshsYx1GGWR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d12852a93c3dbd9d7081e5aba3805ed_JaffaCakes118
Files
-
4d12852a93c3dbd9d7081e5aba3805ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE