Behavioral task
behavioral1
Sample
b4fdc4371100662b10862a89b3522977_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4fdc4371100662b10862a89b3522977_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4fdc4371100662b10862a89b3522977_JaffaCakes118
-
Size
139KB
-
MD5
b4fdc4371100662b10862a89b3522977
-
SHA1
e19c2fe93e341a5a257d37b5d41492eb6ecff9d5
-
SHA256
b5643dbdfb5d3952bfda687cd58963f761c6e0686d3011e4f1e51e4866f0bfd6
-
SHA512
8c391d9e26267637bf68bfe0a1f7f63b5c0e4c9ef57fd7f6bd8e3aa8cc0a46eb652eb935c9b228fb5fdea2e17f4f14233dc3bfc7b1d586a736e8ef5290e84f1b
-
SSDEEP
3072:/CEp50K2LXm/8++uFijEGgfLNTR29C/YsF+VaixIhKC2Ox7:/JiliEEFtpfLNs9C/Ys8FIhKCj1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4fdc4371100662b10862a89b3522977_JaffaCakes118
Files
-
b4fdc4371100662b10862a89b3522977_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE