Behavioral task
behavioral1
Sample
179720db85363067af62110014f419c2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
179720db85363067af62110014f419c2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
179720db85363067af62110014f419c2_JaffaCakes118
-
Size
5KB
-
MD5
179720db85363067af62110014f419c2
-
SHA1
6d1fb687eb88c2bee1f0c5ec3e4618327692e218
-
SHA256
19eec88494b9707cf366d4f9c0531384a4a92c1605c66aa49c40ab9421c70e3f
-
SHA512
ce41db2320b49fb157f7c96578db4a318501031e0a92cd68eb3dcbce1d38ab1dd8565e80f391195d0ae918a17f681fdb698a1ede925c3a2d3ef0f33bfa68fade
-
SSDEEP
96:sJ+pHADNjOaWeiCaEV97kk5WxuOrSPkHvignss/1uuCEBYZ568z+vs1:sJeADdOaWe48WnSPKivoJw560+C
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179720db85363067af62110014f419c2_JaffaCakes118
Files
-
179720db85363067af62110014f419c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE