Behavioral task
behavioral1
Sample
441055b6cec27b84c2feccdf26045de1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
441055b6cec27b84c2feccdf26045de1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
441055b6cec27b84c2feccdf26045de1_JaffaCakes118
-
Size
33KB
-
MD5
441055b6cec27b84c2feccdf26045de1
-
SHA1
31b5de3a0e4bc3222d174a45e2abf5b64c9da0c7
-
SHA256
6a350358a94654b0cc6910cc699b9d81ce55558bdf1be2cdf1a50799490c0555
-
SHA512
734155f4ee1f3e4e1915490f823fb54cbcc05e6f52086789fb66dfec7b9d98fbb77d93d376e8279eccd150b6586078a89a67a86962ccd74e0711b04e5ee1ee08
-
SSDEEP
768:Vc5FGWbSbtKyZud72xH7qf+noRsyRNqFVab6S7ko4AyJCqIZQavI:V0FGySwyopGH7QRsyRQLGsIq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441055b6cec27b84c2feccdf26045de1_JaffaCakes118
Files
-
441055b6cec27b84c2feccdf26045de1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE