Behavioral task
behavioral1
Sample
add96523acb21359d7c282698496b56a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
add96523acb21359d7c282698496b56a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
add96523acb21359d7c282698496b56a_JaffaCakes118
-
Size
5KB
-
MD5
add96523acb21359d7c282698496b56a
-
SHA1
599e3fcf45228eceb1247efa8fabc1a91fd5194a
-
SHA256
92bd8ec27d2db6cfd90a9c7793b657efee78f41be9c05f1271f947002baf4cdc
-
SHA512
011ce05357c8ddc02888485da3f77f5a2b253362e971a853d41aed647056a4090aa91acd252b0242a18a77cd25c34b598da3bbbe659a34cbf17cc53fd850f8e8
-
SSDEEP
96:86zsD7edgvobE9mpNCAwYQlQV2U+TBY3Br1mGHlfXmSzVru:3slQbjNzw702UsefffXmSBru
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource add96523acb21359d7c282698496b56a_JaffaCakes118
Files
-
add96523acb21359d7c282698496b56a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE