Behavioral task
behavioral1
Sample
16ce49bea6182c370b0d15ab36197bd8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
16ce49bea6182c370b0d15ab36197bd8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
16ce49bea6182c370b0d15ab36197bd8_JaffaCakes118
-
Size
12KB
-
MD5
16ce49bea6182c370b0d15ab36197bd8
-
SHA1
9f43b1a17a09d39eec508ab0cfabd5cb1ad153a9
-
SHA256
d760c25a22828f1b9678f8c5e72e20c44dab7e19e78214d767b16c068a39eef9
-
SHA512
34957cf5a2b4282cf4fdb8c55a0de0d31e67961a804a429d5025cc166f41d74762859ac15a7e4a94a03893aa2270afa0256c511cc42464e3653901635d6c9dd8
-
SSDEEP
192:PgA6FOtFBfNP5NGZOAepgN0tJrPK7Cx/U5LelK3Vh5elDvaLn89c8jGh:PgiFNl5wOAe44jn/UFFteinkc8j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16ce49bea6182c370b0d15ab36197bd8_JaffaCakes118
Files
-
16ce49bea6182c370b0d15ab36197bd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yoda Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE