Behavioral task
behavioral1
Sample
4d12bd95d35f9d82b248dbaac2ab2e4f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d12bd95d35f9d82b248dbaac2ab2e4f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d12bd95d35f9d82b248dbaac2ab2e4f_JaffaCakes118
-
Size
343KB
-
MD5
4d12bd95d35f9d82b248dbaac2ab2e4f
-
SHA1
5b7b8dde7537f6c4f524ed0733972495d6d08b9a
-
SHA256
f7738f016765150ae716ff7870c5fbdaf165c31ac7bbcf1adc01563c2c5893ff
-
SHA512
e7cf3648ed9e096c4e8ec6ffe691e38d519d4575088086002dc1432b555c28e3e337c74c774be258705e28982e5f8bca9c9f869064fd90ea933469f899fd601c
-
SSDEEP
6144:d8bOpqv658rKQLAm2nwnehEcRqpyqDK+k2fsOzEly3BL+QV5u8Z:d8hv9LAFnoMVRqccrNEO0s7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d12bd95d35f9d82b248dbaac2ab2e4f_JaffaCakes118
Files
-
4d12bd95d35f9d82b248dbaac2ab2e4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE