Behavioral task
behavioral1
Sample
83d1bc438139faac198b8cb3dfd93f00_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
83d1bc438139faac198b8cb3dfd93f00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83d1bc438139faac198b8cb3dfd93f00_JaffaCakes118
-
Size
18KB
-
MD5
83d1bc438139faac198b8cb3dfd93f00
-
SHA1
a7c32d90a2b7066175a8a1481294d17965ebf31a
-
SHA256
c9d3447856fa6b7a91a8d3bfaeba6cb69b066a8cf1f4b53824fc98828891d139
-
SHA512
5952d2bd81304b54fa501638820747eceaaf147c4461c84b01dab1586109a1f83982fee0fb38e7cbe8a23d8be18a42c9e8cb5060f8a1b56d0c78ad9331868af1
-
SSDEEP
384:ButFbz7KUx6pQYPbOte6JHKycpi/D0GCj2BRIj7yGD4rlg6CL/ZzL1NHgl:ButFv75XYTqe6JHKzpM0Gc0jz8/ljm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d1bc438139faac198b8cb3dfd93f00_JaffaCakes118
Files
-
83d1bc438139faac198b8cb3dfd93f00_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE