Behavioral task
behavioral1
Sample
175cbb1227a1eff6eb5c8b07b793e06a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
175cbb1227a1eff6eb5c8b07b793e06a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
175cbb1227a1eff6eb5c8b07b793e06a_JaffaCakes118
-
Size
6KB
-
MD5
175cbb1227a1eff6eb5c8b07b793e06a
-
SHA1
e4e67920af75be649b6a13eac3bbd4ca69a87f91
-
SHA256
48cc3ff693052f6e05f9c9b2b190a3c3ee27979202f736bf2087848fae64a37b
-
SHA512
aa424743faf8efce828957cb6ed8e764eee32ce75b4077fadf88f571ca4b21de8f34f13037f7f0653fdae93129a8e0c9c9411f5fc7f207fdcc6f9c6cc107f788
-
SSDEEP
48:cvsf1vP4eEMLX3sjhnJ2QguPlaHfqvzRGZ2NdT9wCe0NVhBMFmhBFR5sNr7yBIxz:O8y1JPlaHidJZwWhBRBFLGruQcf8MpE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 175cbb1227a1eff6eb5c8b07b793e06a_JaffaCakes118
Files
-
175cbb1227a1eff6eb5c8b07b793e06a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE