Behavioral task
behavioral1
Sample
196362176d6824850fed93d92beebfb8_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
196362176d6824850fed93d92beebfb8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
196362176d6824850fed93d92beebfb8_JaffaCakes118
-
Size
5KB
-
MD5
196362176d6824850fed93d92beebfb8
-
SHA1
c78ceb1d04d970209b048edfd8a91d15b5f78ebe
-
SHA256
cd7c851f193372e0b68ae13052c11ac2f3df1a45bbda4a08f863c576e5258828
-
SHA512
69939752c7d21606c37ae7768886c1e02edbdc47bd889a5b434d5e0a08f3c011ec8d20157555b2fd4b1fd7ebc55d79bd54588fdd9d5b8a237f143a47dc5edcfe
-
SSDEEP
96:86zs5Y08jw8GDKAQ1t8BQBagIUQFKbubsmZ7DiWa0s5GVuWMDuS:3shFPDKAmGCBmUQFKSbdhDWV5hF5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 196362176d6824850fed93d92beebfb8_JaffaCakes118
Files
-
196362176d6824850fed93d92beebfb8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE