Behavioral task
behavioral1
Sample
086893aaab7faafbdeb3f90c39e45787_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
086893aaab7faafbdeb3f90c39e45787_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
086893aaab7faafbdeb3f90c39e45787_JaffaCakes118
-
Size
6KB
-
MD5
086893aaab7faafbdeb3f90c39e45787
-
SHA1
d9ea5f7d7c91c91d8bfd951d077b034a6841512f
-
SHA256
41485e25a86fa42a3745d2ee755348b75777562eb144951f6b0530a47bd57f14
-
SHA512
bd820764b98258edb9635bde6e5b004e24b3a2d9cae9b720eb49dfe742f3b6beb7fbc2ec0dd5549903a5d9d0e16c020906b5a9f54dbe51f4333db881a0ed63e1
-
SSDEEP
96:sJ+pHKFcPjuqyWG/1YU1aiwbG8OKelRDkmx7LM8yAr3jvcHp1Jwqr+3Z/JB8ejWL:sJeq+y3aiwbCKezkmW8nAlwbJ/JufqJ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086893aaab7faafbdeb3f90c39e45787_JaffaCakes118
Files
-
086893aaab7faafbdeb3f90c39e45787_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE