Behavioral task
behavioral1
Sample
150bd507fec2e7864081d93cdd94ee07_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
150bd507fec2e7864081d93cdd94ee07_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
150bd507fec2e7864081d93cdd94ee07_JaffaCakes118
-
Size
5KB
-
MD5
150bd507fec2e7864081d93cdd94ee07
-
SHA1
dfab3257088e39cd2d8e94344076284b96448de6
-
SHA256
c983af0bbbc14e47bd09c68d063bc06e0591d23d760f99b818ad9b19d1d0a714
-
SHA512
66a16f11eb9f1a16358fa36b19f6e9aaaa32a93f13bde4297e3036b5614c9aac4f371d6d852ccff29bcdd60d457dbb02b7627be9c7a1955223e9daa202870156
-
SSDEEP
96:sJ+pHbhzdIANHtaZW3iHgCafFlPB67nv9RD892pZAK/a19q7arhEbAZR+XyUWr:sJebhzdIcNac3bCwFbcnVVd3S1kWuoQG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 150bd507fec2e7864081d93cdd94ee07_JaffaCakes118
Files
-
150bd507fec2e7864081d93cdd94ee07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE