Behavioral task
behavioral1
Sample
04b486185b843782484b480657dca880_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
04b486185b843782484b480657dca880_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
04b486185b843782484b480657dca880_JaffaCakes118
-
Size
2.0MB
-
MD5
04b486185b843782484b480657dca880
-
SHA1
9cb1fe1420e37a97abcea225dcd10361a440ffea
-
SHA256
f117c3536c808a1967f3cc271bf0ab33116345fdd918e5816e8ef076512bf4e4
-
SHA512
785ecc725b2af8bcd582891c5efeb7e5e968326a3b36d46f30dad84d056af5cd268795c96dcc2afeac1e165d540f265c124aadde81a44581cafdc91fad248611
-
SSDEEP
24576:DYWfmde3WThB+faXexi41hmVxg1gb/tbP8eZSpEH5Ofqe9Q1J0anTTHz4GxK/z7L:sWfmde0IfNxS3/tb8eZS45OfmJ3sGx2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b486185b843782484b480657dca880_JaffaCakes118
Files
-
04b486185b843782484b480657dca880_JaffaCakes118.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 573KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE