Behavioral task
behavioral1
Sample
40b577a5b869b070206dd38f18c74339_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40b577a5b869b070206dd38f18c74339_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40b577a5b869b070206dd38f18c74339_JaffaCakes118
-
Size
81KB
-
MD5
40b577a5b869b070206dd38f18c74339
-
SHA1
273d4ae8e54d28b1a910761f85266f6680baaa08
-
SHA256
b71fdcb272c557c72bdbb040a018bbdd0805fb997bf6eec7e56378317a4510d4
-
SHA512
c7c79dd9a393e8ea6081ef95f4498b4592482174fda95bad20216d51182eb2ae93ac2b981687767e498fa527490d4822b5e00227867d8f298dd9b0cb88e89a62
-
SSDEEP
1536:qWA/hfq/vFWpYD50wbTAMotakImkk6jjS8+9KLbFvPa8KB8qE2KHK:NU6t/WwbNyafmWjjS8+9KLbFvPbKxE2L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b577a5b869b070206dd38f18c74339_JaffaCakes118
Files
-
40b577a5b869b070206dd38f18c74339_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE