Behavioral task
behavioral1
Sample
546168698fe866f36ffd932c4019889b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
546168698fe866f36ffd932c4019889b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
546168698fe866f36ffd932c4019889b_JaffaCakes118
-
Size
139KB
-
MD5
546168698fe866f36ffd932c4019889b
-
SHA1
20478cc8a38642f82d00eb1c299a5160522d1b12
-
SHA256
bb25a4cd5694572033e4b4d5fab8b009d02f03bb37c546332928b9de8457a898
-
SHA512
cdb30d110f356e5ca8c97acf310c9d0ed1be40e5a628e8035016c464bc1e697f72bf721b365c74a46ad518b164a2677c84b69ebd961828c9a0c1bfd426dcc1dc
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 546168698fe866f36ffd932c4019889b_JaffaCakes118
Files
-
546168698fe866f36ffd932c4019889b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE