Behavioral task
behavioral1
Sample
4df6940eb3539b90f926020332e4bf6a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4df6940eb3539b90f926020332e4bf6a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4df6940eb3539b90f926020332e4bf6a_JaffaCakes118
-
Size
543KB
-
MD5
4df6940eb3539b90f926020332e4bf6a
-
SHA1
9ff45fd05fbab49e0cf9412a61070a48cb0f5401
-
SHA256
74284d7d016788332c93b58f5d305de8f486fb5b7499b66c2ffc1c73ce8d0971
-
SHA512
9f94dbab0525a4e774a4ce50fc99eab2628e38d469726bb877c53f6cf2667b9e018907a2732c011067549c5923900d1c72c5591b37bcb5f8589f50d859c7bdd1
-
SSDEEP
12288:NDg5Un0hXDle43v+q5iSsBi7PXqa9TUuKX+Hb:NwTle43Gqfaa9UOb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df6940eb3539b90f926020332e4bf6a_JaffaCakes118
Files
-
4df6940eb3539b90f926020332e4bf6a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE