Behavioral task
behavioral1
Sample
a46b0369c778d1867cdef5114042722d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a46b0369c778d1867cdef5114042722d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a46b0369c778d1867cdef5114042722d_JaffaCakes118
-
Size
377KB
-
MD5
a46b0369c778d1867cdef5114042722d
-
SHA1
8dc705c8de59b779c1060faa9aa27907d9e2f39e
-
SHA256
a9bcdbd7788da44f528558970d34809ed071e107b1f83d101d6a4bbbe1942188
-
SHA512
fe3da8f22be597df5c1304d1bf62eedf38e829d35b943af47a023b21488bc373f393e4f762476bd5eaca6b75aa63d6b0faeb6cab5cae45d0fc0eac3ac198a8f6
-
SSDEEP
6144:PbUSKn4x7ZyBQQUnuRjgAA2XE4saYua29qKrkvJjICosj3UJ/ZQ7IuWBu1Y0zDa1:DvKcZwyn4kAA8E4sazl9xr2fo8UJem4q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a46b0369c778d1867cdef5114042722d_JaffaCakes118
Files
-
a46b0369c778d1867cdef5114042722d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 372KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE