Behavioral task
behavioral1
Sample
056bb9ec9db26814f46f772188437456_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
056bb9ec9db26814f46f772188437456_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
056bb9ec9db26814f46f772188437456_JaffaCakes118
-
Size
4KB
-
MD5
056bb9ec9db26814f46f772188437456
-
SHA1
f3e14dcf403e93b031f92de56614792c567351cf
-
SHA256
d9015f5ba0f90b1323dc65dba75770ec4017c09398d25d47a9e233f4c747037a
-
SHA512
1079b27ac848073664dd3350f6c7b1dc124ed835b79d3e4bda976321f61997cef5ddfab07953244882b61669557c6c7f225765293b83aec7e37cef72cf3cdcd1
-
SSDEEP
48:6zBbxvtaX5fbp0tw+WSq2Upu8metqPrIXHimU7zdvP1vnz63Y8Je9ItZK7PLZ:KBbxlaX5fmvWSKUpACLFzb7PLZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056bb9ec9db26814f46f772188437456_JaffaCakes118
Files
-
056bb9ec9db26814f46f772188437456_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE