Behavioral task
behavioral1
Sample
b4a1b84405132850d22c6e076d7d1b17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4a1b84405132850d22c6e076d7d1b17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4a1b84405132850d22c6e076d7d1b17_JaffaCakes118
-
Size
368KB
-
MD5
b4a1b84405132850d22c6e076d7d1b17
-
SHA1
379bad63fa6d832b365af4a89e9c7e3973c8ef8b
-
SHA256
4a977edef4925c96e7a8ce4a8622bdfb140e69528d61933e5dc1230b29d0d67e
-
SHA512
8935cac4e0f52e225f2684f5b6dee4aa4c9e48d536e31f112b8ddf4cdcec6d0b7f3019de7f4cc04259af7be3c0e1360ac32e168120dfb48d349ffc3548ed9441
-
SSDEEP
6144:IiGiYyHGIQx7IwLx1a2AmfIA6h5r2D9axfgbV2AgmaBeGC0olgIjMoS:o7RIQxld82zfIA+pLfk2vmaB+RlgsMoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4a1b84405132850d22c6e076d7d1b17_JaffaCakes118
Files
-
b4a1b84405132850d22c6e076d7d1b17_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 364KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE