Behavioral task
behavioral1
Sample
4086a3064e7cd2d3103d53aa60a1aa0d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4086a3064e7cd2d3103d53aa60a1aa0d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4086a3064e7cd2d3103d53aa60a1aa0d_JaffaCakes118
-
Size
50KB
-
MD5
4086a3064e7cd2d3103d53aa60a1aa0d
-
SHA1
ecd431fa8d3214ecac4a420c4f8c6a2a732bd915
-
SHA256
905d94c2ac4fa48a89c3747f901038e30745808df4b64a6bb2b9effb4781c2e4
-
SHA512
86b777d4d470d74c61071db1354351bbe7a54d642abf6657421ed47308da0be7f88062596910003181ce7df8e2c67e69618e618fdece1f623981fed26043d957
-
SSDEEP
768:KrkKz/FYAvTkimk8/1rPZFpir+8EWHnAnzHaQW:K5z/fD18/1rPZTir+NWgnW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4086a3064e7cd2d3103d53aa60a1aa0d_JaffaCakes118
Files
-
4086a3064e7cd2d3103d53aa60a1aa0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE