Behavioral task
behavioral1
Sample
4dbc68e66fd017f3a6d2339078821039_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4dbc68e66fd017f3a6d2339078821039_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4dbc68e66fd017f3a6d2339078821039_JaffaCakes118
-
Size
35KB
-
MD5
4dbc68e66fd017f3a6d2339078821039
-
SHA1
86d0e314db955db6d6dbd2b2018b0eab3f4a52ed
-
SHA256
95e00e292e1d4b4cd2274a157e8c805c6648db8550fac6726132433bacf4ec92
-
SHA512
e7df16a1a4d73f617d22f232019dfaccc3e9488765467d76aa2bb38e6ff95b6ffcd9ed984903e7fd952820f2c05ba1e85b386ed08595bd20db3dd95d2a007faa
-
SSDEEP
768:dwPTKrcHnHAIZd5DCAi65aeK9WS+XAjkXQYh1/XmqYj1N7:wTQcHHRd5CAMeqWS+wwX+qOX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dbc68e66fd017f3a6d2339078821039_JaffaCakes118
Files
-
4dbc68e66fd017f3a6d2339078821039_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 772KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE