Behavioral task
behavioral1
Sample
b3af1379c33d4b92b565750cf95c2d0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3af1379c33d4b92b565750cf95c2d0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3af1379c33d4b92b565750cf95c2d0c_JaffaCakes118
-
Size
5KB
-
MD5
b3af1379c33d4b92b565750cf95c2d0c
-
SHA1
7ef9bd7313f0931d7e146ea0d8e2b89ac8b750dc
-
SHA256
958e78e43c1f27809bf07657034b978f6bb6a4234d0c858924d3981a10994dac
-
SHA512
bd03f3835f59519d419102404c2b295aae106c203839f916fe20d2f9c5789f03b2982d1f726c0b344cd627fecf531cfc752054bbf15febfd89142e25e3d13779
-
SSDEEP
96:sJ+pHEqTHE4ipJF3PBK6sgcH4ZMFNg4qKeGaDMfX0NpnSxwm:sJeEoHR0RBKdPybKejDG06Cm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3af1379c33d4b92b565750cf95c2d0c_JaffaCakes118
Files
-
b3af1379c33d4b92b565750cf95c2d0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE