Behavioral task
behavioral1
Sample
413e9b40b16bbd2a48f612c591ddac3c_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
413e9b40b16bbd2a48f612c591ddac3c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
413e9b40b16bbd2a48f612c591ddac3c_JaffaCakes118
-
Size
6KB
-
MD5
413e9b40b16bbd2a48f612c591ddac3c
-
SHA1
d4570f17c8f8254a11ecf123845652bc80362d3c
-
SHA256
7c4b55a39cc6eb39574484d35c58aa25bf3539c33b6c7142055606dd9571153d
-
SHA512
20029b4508f57fdb386a535aa8a888eb5a0740a18a355c18e51a40511cf30f36ce8dd41d7bb97fff9f0cfb95c7bd0b56eef5f6b329dbc7c46300b35d48defcd5
-
SSDEEP
96:nP+yDjnmyIP7TnBNeemvLvuW9s9cdz4a9OEOcqZiC+GYusSTkx6gV4wn6o:nWyGLBIeILuW9s9ct4mOEYH2uN+FbF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413e9b40b16bbd2a48f612c591ddac3c_JaffaCakes118
Files
-
413e9b40b16bbd2a48f612c591ddac3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE