Behavioral task
behavioral1
Sample
f277d4730575f660e5ab027925e3f77a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f277d4730575f660e5ab027925e3f77a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f277d4730575f660e5ab027925e3f77a_JaffaCakes118
-
Size
5KB
-
MD5
f277d4730575f660e5ab027925e3f77a
-
SHA1
c677a9cc063d8c74b7ba9e0f69c41bdd3dd67767
-
SHA256
90f292e83e3bf1793231f83b7f80114c6bd06d3edf6849440b994ecf71075e1c
-
SHA512
0c92ffa36ff9f246866de4d60f4b10a3afd265df2d755ef07d09b8450462f9d7fe463f1decd249a35a2ff652cfde9c02bba382d1bfa789be008cc522dcd8864d
-
SSDEEP
96:XVSA81riV/TJtQHLNLXpeTDyqtKSC+Z/QabZ3FwrQhI9Q/TJOr:/EiV7JtQhrMTDBJhTbdmKr6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f277d4730575f660e5ab027925e3f77a_JaffaCakes118
Files
-
f277d4730575f660e5ab027925e3f77a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE