Behavioral task
behavioral1
Sample
1a3cd151eb9508cd53d398b5835fcd81_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a3cd151eb9508cd53d398b5835fcd81_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1a3cd151eb9508cd53d398b5835fcd81_JaffaCakes118
-
Size
23KB
-
MD5
1a3cd151eb9508cd53d398b5835fcd81
-
SHA1
ac85da41610411e9bc21bbf9f4ea16f93d7376e5
-
SHA256
1d73dc5669276659b90eba82f9cd8b384af48759b9855d408f8354615e54ff17
-
SHA512
a7d4410f727e2dea81f0710d4aac1e2920280d42b6bbdd3892090e4aa5b97d4753963f696731f4e08a72550d81113ac706a25a7ceb4541cbe97c919216d6a570
-
SSDEEP
384:2wznVKyqCvPSryiZuOrmMwRUlewrUCPk3fL3f:2QnwfCyDm5Ule0rk3f7f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a3cd151eb9508cd53d398b5835fcd81_JaffaCakes118
Files
-
1a3cd151eb9508cd53d398b5835fcd81_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE