Behavioral task
behavioral1
Sample
540e2e72ce1f32e95eb8555fc5285b4b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
540e2e72ce1f32e95eb8555fc5285b4b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
540e2e72ce1f32e95eb8555fc5285b4b_JaffaCakes118
-
Size
804KB
-
MD5
540e2e72ce1f32e95eb8555fc5285b4b
-
SHA1
4aa7c0fa995191731c9835441cfcd94291f1db38
-
SHA256
66ad985ead78d04991f6cf1ee84bfe67cbd575b9a455853e8cd309805d29fc72
-
SHA512
e4f4929f9d7acc23a9c1434f61303b3f7285f0a5a81feb436e7edc42575c2183082187a252068258fa4cab3a474082786163546487fb3191904ff54b059071ad
-
SSDEEP
12288:UFK5mhi9UYzJE4UVMTvmusZhe/Q+Zhnxf7lBcdYM9/fTKsbFR4eTfUn2ZctoSB:psIzJLDCusXxmt7lByf9/LfMeTfUn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 540e2e72ce1f32e95eb8555fc5285b4b_JaffaCakes118
Files
-
540e2e72ce1f32e95eb8555fc5285b4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ