Behavioral task
behavioral1
Sample
4400f31c1518bd304c8a2888126eab51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4400f31c1518bd304c8a2888126eab51_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4400f31c1518bd304c8a2888126eab51_JaffaCakes118
-
Size
15KB
-
MD5
4400f31c1518bd304c8a2888126eab51
-
SHA1
6ef3bab5e069c9725b2b3298c563847079f1f72a
-
SHA256
afd67d1c8556ef339a7dd30638c5a1578848c917f8d46323be81ea44b66d7d92
-
SHA512
c31b6c60b2d1760ac2917de1a75585effd0a2b9956404d547d17c313ba08d02e0fd1994468cd9fa3345aa99cc0d5d3e4e3afe2efa1b9cec6128cf1fb6a683549
-
SSDEEP
384:tR4d8d9YI5/bKeyYRJZ7/3ivp8m810jkHY7eGd:/4d8YI5zBtZryvy3CL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4400f31c1518bd304c8a2888126eab51_JaffaCakes118
Files
-
4400f31c1518bd304c8a2888126eab51_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 245KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE