Behavioral task
behavioral1
Sample
1a56ff7e791b5bf4811ef1b4c4dddddf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a56ff7e791b5bf4811ef1b4c4dddddf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a56ff7e791b5bf4811ef1b4c4dddddf_JaffaCakes118
-
Size
5KB
-
MD5
1a56ff7e791b5bf4811ef1b4c4dddddf
-
SHA1
17986318c2a69ef332e2d03590d2aa1ff624719c
-
SHA256
c33738727be3687b42026d4a31835d840cbad836fd26ec9642cdd184467a544f
-
SHA512
8dd8bdc15f94a3ff69cdfbb46f636db63b9b07a18662ec13843fff6bed377c48b5888180f1344f833ab41a5bd942e6e05ef63236d845e27484dffa28cd596c99
-
SSDEEP
96:BLv+5yOJH9OyDrPm8raEcNS3BxgvxSxcl1dblPUYZSEvNDhdQISfeMyysvu:Vv+5yOJdOWrEPSsvUcltUYoE1nQ5fhSu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a56ff7e791b5bf4811ef1b4c4dddddf_JaffaCakes118
Files
-
1a56ff7e791b5bf4811ef1b4c4dddddf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE