Behavioral task
behavioral1
Sample
07d2f216e9fc5e0fab6169a858855d3f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07d2f216e9fc5e0fab6169a858855d3f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
07d2f216e9fc5e0fab6169a858855d3f_JaffaCakes118
-
Size
5KB
-
MD5
07d2f216e9fc5e0fab6169a858855d3f
-
SHA1
14b931d5ce91281eaf800da62d887970f781c6db
-
SHA256
5adfb76eb9f4030f272acc7ed144c0e0413cf9089ee6635fae30c9e54ec2e582
-
SHA512
bf05aade49deb5458c5550a2066cf86f234af2e16aeb13a53cfe6058e7a2a84ec16c72fefc81b55e385e895840a532a98187d088260a9d6f6698c50694263dcd
-
SSDEEP
96:86zscWAW1FgsZexFutCJVMkBkdGeCaKrrZE8SZNfTytNITpRexkj8HW1NBh2ITP:3scWD34xFutLkBkdvKfZJSZWOR8S8E6e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d2f216e9fc5e0fab6169a858855d3f_JaffaCakes118
Files
-
07d2f216e9fc5e0fab6169a858855d3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE