Behavioral task
behavioral1
Sample
18f1311acfd4c4bfffb3d779ef2ce859_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
18f1311acfd4c4bfffb3d779ef2ce859_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18f1311acfd4c4bfffb3d779ef2ce859_JaffaCakes118
-
Size
5KB
-
MD5
18f1311acfd4c4bfffb3d779ef2ce859
-
SHA1
a1d04571a7f273c5482342504a2c7e1a63b50892
-
SHA256
41acd98eb928a96eaf6493ae7d86ae5a21af397dc628f436e536c4842f6a7348
-
SHA512
646154b2d4c01a5fc02998fd5d3e63194fb73c22e4a28639e2727953a344cdb314f114d8d21b832dd95550cfe999006f7e39536e3f52d6288e134f7200d8073c
-
SSDEEP
96:86zsBD1ibLbUcuXs5ncEIfL8AuR9K25NQlDi9uuV94qVs6uEJs:3s9kbLbUcu8VcEITAK25aP69F9s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18f1311acfd4c4bfffb3d779ef2ce859_JaffaCakes118
Files
-
18f1311acfd4c4bfffb3d779ef2ce859_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE