Behavioral task
behavioral1
Sample
830d2fe99674b8e36973bd53815d639c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
830d2fe99674b8e36973bd53815d639c_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
830d2fe99674b8e36973bd53815d639c_JaffaCakes118
-
Size
6KB
-
MD5
830d2fe99674b8e36973bd53815d639c
-
SHA1
cb7e3b22d52a189f20d0ae4c15fe9f28678b68c1
-
SHA256
d2fa5276d2625165cf8f1f853edcd3d6bad251c867461084d4e6d6dace7c8340
-
SHA512
cdb65f41973edd8bdce06f4b74b6f1eb30f2f4942a8d32e60bba6c9c93cb126a542ede53bfa608978f13683f2f8cb42d84b49fa66fe9a952e9f50e0744e8897f
-
SSDEEP
96:D54hHua7zwv9g7Jr+Hja2L1iFVnOi2v7lNmjIR2/kAqbQ7:DGxV7U2dr+H9L1y2v7FR28FY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 830d2fe99674b8e36973bd53815d639c_JaffaCakes118
Files
-
830d2fe99674b8e36973bd53815d639c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE