Behavioral task
behavioral1
Sample
0731f68010e327200bcba11e0abf1740_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0731f68010e327200bcba11e0abf1740_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0731f68010e327200bcba11e0abf1740_JaffaCakes118
-
Size
5KB
-
MD5
0731f68010e327200bcba11e0abf1740
-
SHA1
ad7dea347433d6883c5444fc5fe33bf0512ff19c
-
SHA256
912913f3e559e1b51035aa757ab0ec537f1ea0ae44edf7e95efcb85ca0414537
-
SHA512
fa40e134633ed64d040f96579326a6d9ab5b5e7f4996066d09f555fb94c44a80df12f198ef416ff743a66cd693394d1e0dc8e283c72e893761cd442750020eef
-
SSDEEP
96:86zsGmpS5qBf2mTTU5kKkGcS9xGI3TBxjONqk80nkHjGabtgL0pEz5lfN:3s/grkKTcS9rjBxjONZ8DHLS0pQN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0731f68010e327200bcba11e0abf1740_JaffaCakes118
Files
-
0731f68010e327200bcba11e0abf1740_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE