Behavioral task
behavioral1
Sample
f253a17c1ce603e711399d16e98f50af_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f253a17c1ce603e711399d16e98f50af_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f253a17c1ce603e711399d16e98f50af_JaffaCakes118
-
Size
35KB
-
MD5
f253a17c1ce603e711399d16e98f50af
-
SHA1
01c3e4b0bbc834f465c4dcb14d8b5401e4a968e9
-
SHA256
08953dca86efc0483337a3c60aebf3e32ced0f8660fd84e8847b0223e65f2fda
-
SHA512
f0b6f31936d82863eb758e85888b11808bfcc35f03397dbb55cadcb80c96cd06157a7c9ed875c838f56ce17595e0946f893b32ebc09b759dade84c8fe2c8cf64
-
SSDEEP
768:X8Q2ZDX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIom46+IkNV:s9Z3KcR4mjD9r8226+Hb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f253a17c1ce603e711399d16e98f50af_JaffaCakes118
Files
-
f253a17c1ce603e711399d16e98f50af_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE