Behavioral task
behavioral1
Sample
7210d9bf50d50a9f462ef58128eb9013_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7210d9bf50d50a9f462ef58128eb9013_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7210d9bf50d50a9f462ef58128eb9013_JaffaCakes118
-
Size
1KB
-
MD5
7210d9bf50d50a9f462ef58128eb9013
-
SHA1
fd2d19480a92a247bac4442c654a4a9243a2d37b
-
SHA256
1885e6aefb3915f389b09f191f2c43f0b9c4a438bec519e8eeae75d4a6ed9294
-
SHA512
dde92104cd55ed83d374b50f668cd7f9a138d23ad7a8b8f7064bef26763db6a6ce09f97b1685eb76b0612d337d5af6bbbd48b9b33b8dc533d5c0db287c2e7d5a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7210d9bf50d50a9f462ef58128eb9013_JaffaCakes118
Files
-
7210d9bf50d50a9f462ef58128eb9013_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE