Behavioral task
behavioral1
Sample
016dc661e5fa997f6cba28cf58c8f806_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
016dc661e5fa997f6cba28cf58c8f806_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
016dc661e5fa997f6cba28cf58c8f806_JaffaCakes118
-
Size
59KB
-
MD5
016dc661e5fa997f6cba28cf58c8f806
-
SHA1
0ea4b4a5d02a74f8fe19e65f440740a33e2c7e77
-
SHA256
e5913ea247fc0a37a23948e2e01c281aa7104259e42caa4b4df8ee07eb4d0651
-
SHA512
4ead5164e62305bf693cd84b1715a40f60843a76f372b4ade30a1ac6394757b0c83aebcad0e6610d74e02b930537e8fd81ce5784be2465dbbde25a137dfe64e5
-
SSDEEP
768:NsRgH31/q4Ef6JES2mWpfleEmZ9IqMveU:NsReBeSapoEuKv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 016dc661e5fa997f6cba28cf58c8f806_JaffaCakes118
Files
-
016dc661e5fa997f6cba28cf58c8f806_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE