scan
Behavioral task
behavioral1
Sample
f29a8253d16c55fb22b2c6bbec8495d3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f29a8253d16c55fb22b2c6bbec8495d3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f29a8253d16c55fb22b2c6bbec8495d3_JaffaCakes118
-
Size
15KB
-
MD5
f29a8253d16c55fb22b2c6bbec8495d3
-
SHA1
fb54c7b84b94c337f6c84971bee54f0c65170ac5
-
SHA256
27feafa2bb1b9659841ae8b2f97ca581308f688cc54ade4ca6eb29c9293c310b
-
SHA512
0c1b6c35c2ebbdcbac21b1bf94e8e2bbb7fa7bc368714fd5b86c1f522ac4294e6e346c4ed8dbcdcff21a60a4a6cf3f784564aeceff40af0dd520e9701e9842ab
-
SSDEEP
384:XWkKcpiOrpbRwygD87wIDOaenqQzF37bjfQUJhz:XG69bRoD8p7u97XQU/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f29a8253d16c55fb22b2c6bbec8495d3_JaffaCakes118
Files
-
f29a8253d16c55fb22b2c6bbec8495d3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE