Behavioral task
behavioral1
Sample
b4806c8aeef95bf22786d5440cd548ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4806c8aeef95bf22786d5440cd548ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4806c8aeef95bf22786d5440cd548ca_JaffaCakes118
-
Size
857KB
-
MD5
b4806c8aeef95bf22786d5440cd548ca
-
SHA1
5c2d2aefbf108face3c979983f2a82597d8231f9
-
SHA256
ab5501bfe13446b854fc3e562343e976ab681b686cfd1cc8edf278d135f269d9
-
SHA512
3dc3c859aa8f8c078f9b659a95fe83075cc65e9a581e270f458826072d697e48bc0d7771e65c122334fa14e6619f61a95c8bafd1dce3ac26de378d7e3847af59
-
SSDEEP
24576:33qrBbH7nTVKm4W5AkNQBncEvhUAsV9Kwfdnee2r9o:Hkbbn67Nz5UA0Kwfdnef
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4806c8aeef95bf22786d5440cd548ca_JaffaCakes118
Files
-
b4806c8aeef95bf22786d5440cd548ca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 839KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE