Behavioral task
behavioral1
Sample
07f37a606412137fa2c7b0f58da25aa1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07f37a606412137fa2c7b0f58da25aa1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07f37a606412137fa2c7b0f58da25aa1_JaffaCakes118
-
Size
5KB
-
MD5
07f37a606412137fa2c7b0f58da25aa1
-
SHA1
4dd24469e9bf4760e75d79033afe578a17f745f6
-
SHA256
4645d67ce24a82bca56f5665ab5281bc8220fc1a9526d0e9df09103b9f06f41c
-
SHA512
5216a1eef818563d7b5906a61b2d8473ce5d3a3384b4adcb6775175c9bca40aac3fe8479894ebe0a849fe828e6cec15c4052b15d309b5c3e5072c5a32e4e8e95
-
SSDEEP
96:s6Fd7OGWqGQJ3iXZ8qgVAWxObkvhbGocQS15/6wvuvHj1:s6FpyqGQMiqfWgwvhAQg/6bvHp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f37a606412137fa2c7b0f58da25aa1_JaffaCakes118
Files
-
07f37a606412137fa2c7b0f58da25aa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE