Behavioral task
behavioral1
Sample
b9a8d3e634b0c017a092290fc6fd586b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9a8d3e634b0c017a092290fc6fd586b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9a8d3e634b0c017a092290fc6fd586b_JaffaCakes118
-
Size
5KB
-
MD5
b9a8d3e634b0c017a092290fc6fd586b
-
SHA1
14ffd6f394c9a3830dd75cc1f6d07163b28f899c
-
SHA256
4056b66d0a7702a6fac642d3d8034ed466bb980d5d4f9ba9c68d67ef72c43c68
-
SHA512
d6317cc4910290f691e71210611d97b25d4bb34c97b6719710f98a106f0363713a6868dc8410b9ec00327060ba4b6636c6d4c0fdac51b0d535793e7113b7e98f
-
SSDEEP
96:s6FIXp81/ikOrNXE5A4Mri38ccMgCxQYETQ1WI2xzgO+VIfOq2mgOb:s6F+LXaAw3lmYETysDQe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9a8d3e634b0c017a092290fc6fd586b_JaffaCakes118
Files
-
b9a8d3e634b0c017a092290fc6fd586b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE