Behavioral task
behavioral1
Sample
ad86edaff07a417b2b3e0bf5e032c976_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ad86edaff07a417b2b3e0bf5e032c976_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad86edaff07a417b2b3e0bf5e032c976_JaffaCakes118
-
Size
41KB
-
MD5
ad86edaff07a417b2b3e0bf5e032c976
-
SHA1
23fe3680599fd24c18f97c3100749d927a30132e
-
SHA256
c75052792213787fe57ca04b4a4e7d2e472e17ee4d6ef443f017002a6413fde1
-
SHA512
65996e62a71815150814d7f4c8387f7a4ede2e83b32cebc06045eba864bdb26b6d72215c993535aee2435a8086e9539395724cc43e7299fbd92dd825af098c93
-
SSDEEP
768:z00uJ6RE3Fynp98XCJ4mTmaqzLe8aHyCcGZNvgvGh/g5D/B8WAhqCPG0TfXc:Q0G68knp85miaCjoy0ZNv7gF/uRPi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad86edaff07a417b2b3e0bf5e032c976_JaffaCakes118
Files
-
ad86edaff07a417b2b3e0bf5e032c976_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE