Behavioral task
behavioral1
Sample
f4e99d96409a0d3d7b04acc9074f8464_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f4e99d96409a0d3d7b04acc9074f8464_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e99d96409a0d3d7b04acc9074f8464_JaffaCakes118
-
Size
391KB
-
MD5
f4e99d96409a0d3d7b04acc9074f8464
-
SHA1
20eed5c6a099e79e36eaa0c2d3a14341df980af1
-
SHA256
d0543b3b8d1ee84e2da4455d4d265d062559380eaa2b788ad7ef1e757e4094de
-
SHA512
705c4633be3a854f29a231e2f19e94c7c8fae7a07ca0f86876da3f55f38b3e91247e8a79acba389e8d956d5565b206ece5a37710841724991e31afc673faae6b
-
SSDEEP
6144:I0gPsvw9BNG9XqxMMmkC7TOWjFzJy4d6zIAgm5+cwvvU/tIqE4DS3EX:I0HwcXqDmkOlW01mtIqEb3i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e99d96409a0d3d7b04acc9074f8464_JaffaCakes118
Files
-
f4e99d96409a0d3d7b04acc9074f8464_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE