scan
Behavioral task
behavioral1
Sample
81c48df1c15d80acf1d81ebebfda4ef4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
81c48df1c15d80acf1d81ebebfda4ef4_JaffaCakes118
-
Size
17KB
-
MD5
81c48df1c15d80acf1d81ebebfda4ef4
-
SHA1
d673c4be5b6723e9c77a07ea82b7e5aedb4bcd54
-
SHA256
ce96176df52a58c6c4886b69ecca9686cfd7581fa4811c81f3e896208dee4f85
-
SHA512
b400b4ea008cba254da6b145bcf6987419fac19cfb6dfaaba492c89a0fb9753570bfd408f2dfeaf2071e7b99231b95a837bb9e39ef3e03f70b7c6e9d89b5b4b4
-
SSDEEP
384://DEKZOw/XDfm8KPJLE1w8NWx3TCXLtkkfGi5BQyHyF:DI+rjKPJE5s32XLtdGi5+F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81c48df1c15d80acf1d81ebebfda4ef4_JaffaCakes118
Files
-
81c48df1c15d80acf1d81ebebfda4ef4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE