Behavioral task
behavioral1
Sample
1c30f0168a495acfa8b283f20f1aff7c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c30f0168a495acfa8b283f20f1aff7c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1c30f0168a495acfa8b283f20f1aff7c_JaffaCakes118
-
Size
5KB
-
MD5
1c30f0168a495acfa8b283f20f1aff7c
-
SHA1
31892b0bed9dd60663bfdebc4f73bd5c5cb66c53
-
SHA256
30539a1ce0951aedb4cb5e8b7969a2a1a36c8d60dc294c8a36109d15bb1ace8c
-
SHA512
e474ba21a98c7d360cbc9a70b07c190bbb0f95ce4f125941554963cc6ccd8cbb466221cfd7b92ef96d04b6ad2ec3351b43f36f184fb7b0ad27906a8515dd4d6b
-
SSDEEP
96:XRHTndA7PnHQfp1T39gRlWhH8jfMQL/x007P+x+xUUQZqn7w/RpXKQDBO:BzncPnHQfLT39gBjHp0GVxHV7wzaQY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c30f0168a495acfa8b283f20f1aff7c_JaffaCakes118
Files
-
1c30f0168a495acfa8b283f20f1aff7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE