Behavioral task
behavioral1
Sample
4336b8e34572b9dc25dd98bc89e97cbd_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4336b8e34572b9dc25dd98bc89e97cbd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4336b8e34572b9dc25dd98bc89e97cbd_JaffaCakes118
-
Size
139KB
-
MD5
4336b8e34572b9dc25dd98bc89e97cbd
-
SHA1
0e68ff456dcb2df3811b4863ee971c412d45a550
-
SHA256
b87ebffe427e86c7424eec415cbc41cc779d33773330a66f6f67fafd906149dd
-
SHA512
9c0e990d4d040d2d76b54d0983c26524ee93f0b22f76936952c33cf76ae70f64be1838ac08b09ccffca378c80a325a010fc8fcb1ceafa62466a11bb19b231550
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4336b8e34572b9dc25dd98bc89e97cbd_JaffaCakes118
Files
-
4336b8e34572b9dc25dd98bc89e97cbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE