Behavioral task
behavioral1
Sample
b9721d469481b9f234f01be184c73575_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9721d469481b9f234f01be184c73575_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9721d469481b9f234f01be184c73575_JaffaCakes118
-
Size
6KB
-
MD5
b9721d469481b9f234f01be184c73575
-
SHA1
7df110603857ba005353a7d786f7f81b82e556c9
-
SHA256
5b5bd982ee0acf8a57027134e2e18f3917482fd08e71d05aa74036bab37a053d
-
SHA512
c2f57aebe826d174929914fa61ed76ad1cfc8db3ca51526cb27f9fd8135872c60bc0650a58a342d7867778b55ee4b467a31e1335a713e583952c51a3b6a0be92
-
SSDEEP
192:Ttg2bs4mRQvHvvuIjwt4TPCfNovPAMjc90IvQ9vk:Tt8mvHvG4jC+vtjc9Nqc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9721d469481b9f234f01be184c73575_JaffaCakes118
Files
-
b9721d469481b9f234f01be184c73575_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE