Behavioral task
behavioral1
Sample
23a080671fe1d7e594c6f9ec903b8eb6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
23a080671fe1d7e594c6f9ec903b8eb6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23a080671fe1d7e594c6f9ec903b8eb6_JaffaCakes118
-
Size
30KB
-
MD5
23a080671fe1d7e594c6f9ec903b8eb6
-
SHA1
fb652fed0642ba23340b257be81421dbcd9ea095
-
SHA256
090fc15c08b8de509ec37a249ed17d5c3cb15059dc1dbb39653123ec581b6867
-
SHA512
52b8a635508ca83f5dc30ce0156eae42bfe3cbdb32bc97ae8ef6ef89ad7fc4c4cd1f00531bb8d6c67d70366bcc93b4ab309a380fc3c0ee13d961433256a2dccc
-
SSDEEP
192:191Rve3rJ+a6Oe1mga1OiY0AsUNCFUb8P0L:191RvOJ+a6Oe1mga1Oz0AsUNCub8P0L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23a080671fe1d7e594c6f9ec903b8eb6_JaffaCakes118
Files
-
23a080671fe1d7e594c6f9ec903b8eb6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE