Behavioral task
behavioral1
Sample
4dc83758510a76ef4001e0ab7403f9af_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4dc83758510a76ef4001e0ab7403f9af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4dc83758510a76ef4001e0ab7403f9af_JaffaCakes118
-
Size
10KB
-
MD5
4dc83758510a76ef4001e0ab7403f9af
-
SHA1
8647f56a24678260627a657d5337d8382700f6e7
-
SHA256
675ff4f2a7c8fd5f18717b9146f84b4f640823ad2017ce66df9351621fe948a5
-
SHA512
25e65503212030c7306b610373b9644208bcecb5f5ef1671dc394e4555f832cb599e109deca197891975078b395cea46ed8f7141d58865136b9acf58e3da1a22
-
SSDEEP
192:oTXZlFlQFqVVW+CQM6+fQa/WLZErembZUN+yFaNJhLkwcud2DH9VwGfctd0:qp3lG+CQM6+4bTmb6+2aNJawcudoD7UY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dc83758510a76ef4001e0ab7403f9af_JaffaCakes118
Files
-
4dc83758510a76ef4001e0ab7403f9af_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE