Behavioral task
behavioral1
Sample
abcc07fb0c8d21304c9801b8ca60e4c5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
abcc07fb0c8d21304c9801b8ca60e4c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
abcc07fb0c8d21304c9801b8ca60e4c5_JaffaCakes118
-
Size
20KB
-
MD5
abcc07fb0c8d21304c9801b8ca60e4c5
-
SHA1
798e54ae2532d0518352760d7f02319f720208e3
-
SHA256
14f17799a0a6f32b567bed4537bf3c88c4d6bbbebcd850fe0929ce2a0d2e0abb
-
SHA512
f7392f1775daab9924835c7b013d0a22741da9b54c701b7d0b80fe5d9fa3eba214c0a726c5c05850d32c6f1fee654abc5ba64bbcea628ae4e740c7327043cf1c
-
SSDEEP
192:510HVFnXlKyFMOJd1BPSXPe2T7GCkE80XucCEJ0uc/ftyrk1rY1naI8G/mIVnu/:XwznVKyqCvPSryiZucJ0IikavG/hW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abcc07fb0c8d21304c9801b8ca60e4c5_JaffaCakes118
Files
-
abcc07fb0c8d21304c9801b8ca60e4c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 91KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE