Behavioral task
behavioral1
Sample
a9f4da00d5093441769f393deb92d937_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9f4da00d5093441769f393deb92d937_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9f4da00d5093441769f393deb92d937_JaffaCakes118
-
Size
6KB
-
MD5
a9f4da00d5093441769f393deb92d937
-
SHA1
5074b2458920e22980ee4bd04b877f83af900e23
-
SHA256
2fa56be00b2d39704c4551c2281393600ec13844d2df1c580b8a7e1826a00e8c
-
SHA512
57eaa80df1a62bca4d6335ce4cbfa7a72d37435537840dd3e9c1d4e2d324d18c292a7cc5805aaf8787e10ded8c1aec6d03f5325a44e2e7a428ea8ba8f4bb1dce
-
SSDEEP
96:86zsVb/3E6syfIVYuAfNmcvsSAZBdyM2JBW2ZigpYe/6ljecZ6GZjF9k42ZhiEsd:3sVbPEIfu3Asd07ZFQ68jF9z4hiElZg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9f4da00d5093441769f393deb92d937_JaffaCakes118
Files
-
a9f4da00d5093441769f393deb92d937_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE