Behavioral task
behavioral1
Sample
1679a17aeab48ac2fd1c156932f2f3c9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1679a17aeab48ac2fd1c156932f2f3c9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1679a17aeab48ac2fd1c156932f2f3c9_JaffaCakes118
-
Size
29KB
-
MD5
1679a17aeab48ac2fd1c156932f2f3c9
-
SHA1
1ec0e7b3235e216b11ee46e4e81683f7834caeb8
-
SHA256
3b6ef56dd970b01244aa7238bdd8c2ce35de03caf45cc14f04f5a58f72078897
-
SHA512
8f9f0f3112f85b90518e0f20bbf28500a942da78ce4b540c33d4e52cb2dfda3354d1cc01944a5382d0cb4488b5a23ff963bea5c855d8469771fe98ab1cf1e91a
-
SSDEEP
768:eY0zWDJpnXEjUKuIycqSVOwMko8bzHmIy:eY0OpnXEj8IHDMl8bzHmIy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1679a17aeab48ac2fd1c156932f2f3c9_JaffaCakes118
Files
-
1679a17aeab48ac2fd1c156932f2f3c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ