Behavioral task
behavioral1
Sample
406947cad4f720ee0b9f5c493a174495_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
406947cad4f720ee0b9f5c493a174495_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
406947cad4f720ee0b9f5c493a174495_JaffaCakes118
-
Size
330KB
-
MD5
406947cad4f720ee0b9f5c493a174495
-
SHA1
21119e94cb3573e6ead684809a0cd13cb5005d9a
-
SHA256
6999f5c7ca1a8ea481bf866f9cecafb9709dce0f65de00df44b4be5861e7c819
-
SHA512
ebf8f2f82f1729be6a8e3bfc2ef293671fb155e64e0d5ea4f47a3a01d6f7aeb43401f5e45144427aa143b2d0c7d9f728eda89ff25975b83ac5562c0e7f2af96a
-
SSDEEP
6144:93yKAV3lbS4BoNpDyhBOajkj0hGdxG5GmT8e+ZS2eYbl/0gvoS/:xAv0NpOQfj0hG+Go+42eYdvoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 406947cad4f720ee0b9f5c493a174495_JaffaCakes118
Files
-
406947cad4f720ee0b9f5c493a174495_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE