Behavioral task
behavioral1
Sample
afdea63a93acfac8ccb520af01f94a62_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
afdea63a93acfac8ccb520af01f94a62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
afdea63a93acfac8ccb520af01f94a62_JaffaCakes118
-
Size
8KB
-
MD5
afdea63a93acfac8ccb520af01f94a62
-
SHA1
663d4ddd9fd1373853c9d2e1925d9228281cacdb
-
SHA256
1a16f22b7e1776bd7019f7a5808fb287770e29bc1bbd1ca2620307908b1d7108
-
SHA512
912a8fb7ec01961316d60e46c6c59690a55db4f6cca9f053e63b73241f21708fc9c37d9cd7e24ef48d855b66f3f5d8d3b6b7bb729a7d937a746aedda7d89ad1f
-
SSDEEP
192:oXD4X5ngq1Z5RPlTsrCjSf1SWNcas+r9alRjfNt:f5nguZpAmStBca39al9fNt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afdea63a93acfac8ccb520af01f94a62_JaffaCakes118
Files
-
afdea63a93acfac8ccb520af01f94a62_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE