Behavioral task
behavioral1
Sample
b9e7e17bb882a75269a53f33eeeaca95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9e7e17bb882a75269a53f33eeeaca95_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b9e7e17bb882a75269a53f33eeeaca95_JaffaCakes118
-
Size
11KB
-
MD5
b9e7e17bb882a75269a53f33eeeaca95
-
SHA1
b743de481f42d0a32a328f56208466a7fad8f7b5
-
SHA256
981e8f4a004863fa55a5bab969263508be2e4c63339478a1616ef6a767e8aa37
-
SHA512
cdf15d226a075e15f377c839ee1e7510572ba9e9663e4cb434587807a6bd7879f00b797155f7fcb43490f7a264466430d2ce37f178a5fdb2eb38281a20ac6889
-
SSDEEP
192:nZdOVE7v/xmLTgkl9mIF2E8StnYad41ZWFWahOrf2wUWIdMM9otVNJbqWi4O:TaEoLToREltJK1MFx4bBU3h4VNJbqh4O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e7e17bb882a75269a53f33eeeaca95_JaffaCakes118
Files
-
b9e7e17bb882a75269a53f33eeeaca95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 560KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE