Behavioral task
behavioral1
Sample
a1ff450e6345a69d825944687bd7e2aa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1ff450e6345a69d825944687bd7e2aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1ff450e6345a69d825944687bd7e2aa_JaffaCakes118
-
Size
5KB
-
MD5
a1ff450e6345a69d825944687bd7e2aa
-
SHA1
613f62a90d5dbb8e01e7b6d8b90d27ab72777db8
-
SHA256
d2ca46861531948fa030024123397b3af41ec126bac2a7c76924c01525fbb489
-
SHA512
06bc5b5896e32c5eaf80b3c123656f08557c5858cdf6b0f1fa0553eed5c5f29e06882fc8ef378eab8b0c852a73d35cb7695d0951e5848f59266fa47fdd1ddca2
-
SSDEEP
96:86zse/ybP6B2B+nHlBbzqRSA8WpvRlEsa5jbv9le+CMdL09B8VLCWhp4rLtns:3sPbs2IFV2RpxRO9bHefwL0YBCWhpgLm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1ff450e6345a69d825944687bd7e2aa_JaffaCakes118
Files
-
a1ff450e6345a69d825944687bd7e2aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE