Behavioral task
behavioral1
Sample
4032160dabac7b2d23fc2b7aea2a76b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4032160dabac7b2d23fc2b7aea2a76b1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4032160dabac7b2d23fc2b7aea2a76b1_JaffaCakes118
-
Size
137KB
-
MD5
4032160dabac7b2d23fc2b7aea2a76b1
-
SHA1
229800c1cf7df65419a63f91f20950b8bc059c06
-
SHA256
7399fe2e596532c2a41b681fd210768de055d80b0e2bdb58e781b8f393c814ed
-
SHA512
d897f25a986f8c2936474a434d62f3be554bb9f214eb1666ce9f3885d8dd4d9459c8e9ec1f954fcfad3a400503679adfc5b07491c367a43925a9abd4eae4d783
-
SSDEEP
1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WT:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4032160dabac7b2d23fc2b7aea2a76b1_JaffaCakes118
Files
-
4032160dabac7b2d23fc2b7aea2a76b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE