Behavioral task
behavioral1
Sample
a0008d643e3b3d784732d6b017972739_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0008d643e3b3d784732d6b017972739_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0008d643e3b3d784732d6b017972739_JaffaCakes118
-
Size
5KB
-
MD5
a0008d643e3b3d784732d6b017972739
-
SHA1
ffe0b2b679612322c96ed4328b93b2b390451d29
-
SHA256
c109cb5a60cc613621dac5290406ecde61946c1f59df79e1c2d7dadf26a611fc
-
SHA512
4824f3c671c4dd77d332df394d6a8736b0d84714b5f40680470ea8d3eb60a0943a86e74c3120d8c56fb8d48ba868a073eead3770b157a0785c28ac3a60fa1b43
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHP:DOSp7sChepoC7A5jjMGu4qwnP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0008d643e3b3d784732d6b017972739_JaffaCakes118
Files
-
a0008d643e3b3d784732d6b017972739_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE