Behavioral task
behavioral1
Sample
4125535e6bc831d149eaf9bbcb9286c8_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4125535e6bc831d149eaf9bbcb9286c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4125535e6bc831d149eaf9bbcb9286c8_JaffaCakes118
-
Size
10KB
-
MD5
4125535e6bc831d149eaf9bbcb9286c8
-
SHA1
496afd9e246106a94a065b3d5ddcf3e729e85c95
-
SHA256
6345c43357b482a53bba80abb93015498bff9fb20bc0e092cb9e473bcb058161
-
SHA512
a04be648cf0db53fdaea0e96087d6776c6a1847672598591ca0ce37d21eb833084a97d61a6ddda431acf4489a6845af53055b72dd90b940186c3838f0b4a8433
-
SSDEEP
192:5ixExpawSlJwMptLlUoBbu/jnIE4IhaN2OcK8+QOJ0OtvNSDPA:5ixE7OJwMrL7snIE+8ot4Do
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4125535e6bc831d149eaf9bbcb9286c8_JaffaCakes118
Files
-
4125535e6bc831d149eaf9bbcb9286c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE