Behavioral task
behavioral1
Sample
4c17c2354375eeaac1fcc5517b5075a8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4c17c2354375eeaac1fcc5517b5075a8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4c17c2354375eeaac1fcc5517b5075a8_JaffaCakes118
-
Size
83KB
-
MD5
4c17c2354375eeaac1fcc5517b5075a8
-
SHA1
43cdabbb6e0ddb8a5a76adee850a4d25b9786083
-
SHA256
dbb6ba23b0fd879bcb29fd33fd1e01739a98386df0f2510afc080e587d97aa4b
-
SHA512
5876c510d4e140808d245d23e194ea894caa53f2717852b4fb75b47d731f8dd7196426a7f36d111eb250bc74a74df011b6b50b42c9a987ef4c6bd70e9777e772
-
SSDEEP
1536:SHNeMdtX8c2yU6+thp19h4FBnouy8Vm8ATAYS6N+xDD9E9U1zMZ2z8:S/X8VyUBthpKhoutQ8G5wnyYIM8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c17c2354375eeaac1fcc5517b5075a8_JaffaCakes118
Files
-
4c17c2354375eeaac1fcc5517b5075a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE