Behavioral task
behavioral1
Sample
4d4c50b47b45de0c0af0cb5485a84eaa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d4c50b47b45de0c0af0cb5485a84eaa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d4c50b47b45de0c0af0cb5485a84eaa_JaffaCakes118
-
Size
8KB
-
MD5
4d4c50b47b45de0c0af0cb5485a84eaa
-
SHA1
775fe07c4fd0816d281af749be69fa44e5388341
-
SHA256
a90c9d5c97405808fe4aa4394fa3a057be8dc614218a6fa8271c02b1fb198ffc
-
SHA512
51c88da3fa24394ea5f8c55143cbd582b2078cb25993f9e7b837e84731d496e333a6c6181a11609e04d81394ba76dc307da85a8d1b1354e863c0d55e41e45325
-
SSDEEP
192:/zUZAOvPQ29hT6cRQzovhbSK/eviPfZ5jHpW/RE8IPl7s:/zUNw2zTWYhvB7HpWO8+7s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d4c50b47b45de0c0af0cb5485a84eaa_JaffaCakes118
Files
-
4d4c50b47b45de0c0af0cb5485a84eaa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 932KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 309KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE