Behavioral task
behavioral1
Sample
44e0e05e060a4059f09392b2c3df282b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44e0e05e060a4059f09392b2c3df282b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
44e0e05e060a4059f09392b2c3df282b_JaffaCakes118
-
Size
139KB
-
MD5
44e0e05e060a4059f09392b2c3df282b
-
SHA1
f72ab88a7a7714aa8b44f46360bc7c6031a86c71
-
SHA256
b5b74153f6646be14106eb4213f30be5b6f281aac74cdde0143794d2789787dd
-
SHA512
d2bc49cb97c48eda0b88fc51129038e56198a48395bf4692f3de2562f7a2a2350eacaa3d387913903b0e17515b06d8e4d751615e9988c45e525c04c48130ee45
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e0e05e060a4059f09392b2c3df282b_JaffaCakes118
Files
-
44e0e05e060a4059f09392b2c3df282b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE