Behavioral task
behavioral1
Sample
17a7ed32c3c5afde0c173934a42dc733_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17a7ed32c3c5afde0c173934a42dc733_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
17a7ed32c3c5afde0c173934a42dc733_JaffaCakes118
-
Size
5KB
-
MD5
17a7ed32c3c5afde0c173934a42dc733
-
SHA1
e5ccc5b3154eb5b5d4d28c9d04d862ea88ec00ec
-
SHA256
2d90d50f7b7d0f26f207de0cf91de5f904e6437156d8cf0293655eaa738774cd
-
SHA512
f8bb29b24e417a4b1b31fb697cc003e058b41b5cade568ed6fa89efbe3befe10edec895f3ca55ffe17fd300da30f00e6fb2c0f8a8996e7417b31a4bc6ac34a82
-
SSDEEP
96:86zsUFgW/N6RY4g4qAZe+B8phDmKmTPDSuiq8+9BLy7rUfxWhcLKX6EFx3hK:3sFY6oAE/7Aoq84tWhcq6EFx3w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a7ed32c3c5afde0c173934a42dc733_JaffaCakes118
Files
-
17a7ed32c3c5afde0c173934a42dc733_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE