Behavioral task
behavioral1
Sample
4da9e62a060c444f047130447e67e134_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4da9e62a060c444f047130447e67e134_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4da9e62a060c444f047130447e67e134_JaffaCakes118
-
Size
481KB
-
MD5
4da9e62a060c444f047130447e67e134
-
SHA1
b2cb8ad87e268b34cc690ce440de345fde62ee64
-
SHA256
110bfda07fabdcbb91b50fe4cd3a7709f69e3a96327d28158edce564a53c924b
-
SHA512
809634efb7d652c74373a6bb91d8745e090474020d96d3b6733a11b6c2460d0b58dcbbcfae3bd0499413956116ca77a8372f1a4340930db6ab695afae0324b87
-
SSDEEP
12288:u1u1C/DQEo77jOKJtPEKS1bfO0CIIpTNYdrgyn1bs2oS:u1ugDROh5c1bfOjIIpTNMX1Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4da9e62a060c444f047130447e67e134_JaffaCakes118
Files
-
4da9e62a060c444f047130447e67e134_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 473KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE