Behavioral task
behavioral1
Sample
b46f73950863d53d279ad0a731f5888a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b46f73950863d53d279ad0a731f5888a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b46f73950863d53d279ad0a731f5888a_JaffaCakes118
-
Size
826KB
-
MD5
b46f73950863d53d279ad0a731f5888a
-
SHA1
31c9f36e7ea800c216752595945901caeacdb619
-
SHA256
19f1011f9dc9972a3ae122b0bf2e8e3df26b8721ece4b9afa1b50caf1bb81099
-
SHA512
08266d1646e2e4895027357e40281867154eca49eea8ff63affad28f876929fc1878a5db37a73756cf2a99ca683b0b31858eee1a6a436a15cd88017f5266dd46
-
SSDEEP
12288:4q+/TXNFm3lChFvkoQp2TyETQpTomJaMjcGMcRLa+NkxAAM/Xq2R83IjtRyLOcVn:4qm/HTQYiPaMjc7zxAjPRdj0LgLbV2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b46f73950863d53d279ad0a731f5888a_JaffaCakes118
Files
-
b46f73950863d53d279ad0a731f5888a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 811KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE