Behavioral task
behavioral1
Sample
b3bd703429f3bddab654bdd024e39808_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3bd703429f3bddab654bdd024e39808_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3bd703429f3bddab654bdd024e39808_JaffaCakes118
-
Size
5KB
-
MD5
b3bd703429f3bddab654bdd024e39808
-
SHA1
30315d17065afea1856293d202804e12fdbda425
-
SHA256
97ed269c6d22570893033de61167fa3953069f2e50ab46104bac6aa0aa3d91e8
-
SHA512
d0f3be902cb9e4f8735be407ad384617231a4c12a400a50b580aee74a898581d924b2d411bec0f9144e0bea50e0d6559f7b5fd6c692fbe91a2bd631b81a30ef9
-
SSDEEP
96:efOw63y7ppYqGs0VMlz64el8CVIcYUUiQKnBYGXuB/5nZU/mwxtPjU:efn2y7LX0Olz3eyuIcY7iQwBnul5nW/8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3bd703429f3bddab654bdd024e39808_JaffaCakes118
Files
-
b3bd703429f3bddab654bdd024e39808_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE