Behavioral task
behavioral1
Sample
266d8853189cb442206386a5ce1b48f9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
266d8853189cb442206386a5ce1b48f9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
266d8853189cb442206386a5ce1b48f9_JaffaCakes118
-
Size
5KB
-
MD5
266d8853189cb442206386a5ce1b48f9
-
SHA1
8133193cbdfd108fc79677be15b976295a6478f5
-
SHA256
912e199656d5665a274de7a9786b8e95173f8fc6687754ec77d5ef5d7939cca6
-
SHA512
1f2e38c3383b2daed6618fe318d5759b1c2fce67feff2f491eef628cc29d589109f2daf081afde3030ff5009055d075ca4450097ce86b1f5ddc7c41746e1177c
-
SSDEEP
96:eBAR7hezBxNQZb0bbNXUJmasRXbGX0/7MQmWirv/ShPrVsrflfPpygP:eBARletxGZQbbN0mJRGE/7/SHw+rNr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266d8853189cb442206386a5ce1b48f9_JaffaCakes118
Files
-
266d8853189cb442206386a5ce1b48f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE