Behavioral task
behavioral1
Sample
4e1b18df5b530eabf0579257a0cea0c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e1b18df5b530eabf0579257a0cea0c7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e1b18df5b530eabf0579257a0cea0c7_JaffaCakes118
-
Size
227KB
-
MD5
4e1b18df5b530eabf0579257a0cea0c7
-
SHA1
b2729b58f741a35bc4eec0c86cd9794bc1693996
-
SHA256
e0ac5e403207408269cbf5671ffe408c19b25b819813f75a4deed31acf0b28db
-
SHA512
ae20a481f2fe2d3a7ed8d79698a2e11bb8e4616d728540a1784e8320a41211011c690741c1b14d22e495a424826f53a53ec5838d7e7dff660c4ab9b03a3c3e34
-
SSDEEP
3072:Ox9DDnY+e5dHXzLsBm/Jvc2J/nOo2FGS/rgm6DNDE8UCiWg:Ox9DzFM315ceJ2c/NQ8UCiW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e1b18df5b530eabf0579257a0cea0c7_JaffaCakes118
Files
-
4e1b18df5b530eabf0579257a0cea0c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE