Behavioral task
behavioral1
Sample
40eeaecd4052d5e68803c9706a3e50b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40eeaecd4052d5e68803c9706a3e50b4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40eeaecd4052d5e68803c9706a3e50b4_JaffaCakes118
-
Size
1.6MB
-
MD5
40eeaecd4052d5e68803c9706a3e50b4
-
SHA1
b1cc0d7ca786fe5838879379e2b79011a6a4424e
-
SHA256
6d1e362de19b22c7c83247ca0cc205b7daa86600fbec5efe38cdbaee244cadc9
-
SHA512
afc74b1d1b03f08d974ec69061a1f73ba0deaa208417975550c5c850bf70d9731da637c5e051d86179f6451a6ad6d0da8bd879f9ef117133120084d970d5d1b7
-
SSDEEP
24576:u2KqM6DjaWbqkoN3Ql4pcedErjVtC7R1kehZF4/+Opv2mnDhjsqUXf4bJL:uUlLtoNgl4/Eq7xZXk+I9IA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40eeaecd4052d5e68803c9706a3e50b4_JaffaCakes118
Files
-
40eeaecd4052d5e68803c9706a3e50b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 451KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE