Behavioral task
behavioral1
Sample
ba322be2a36f5d5e9c29a18c37ac338b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ba322be2a36f5d5e9c29a18c37ac338b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba322be2a36f5d5e9c29a18c37ac338b_JaffaCakes118
-
Size
17KB
-
MD5
ba322be2a36f5d5e9c29a18c37ac338b
-
SHA1
bff2aaadf7095928cbc805595cf624dccfeeb8e3
-
SHA256
1c1cf98a2ede220135369a7217e9a1ce14e13d284967806122d0e4cfe0552c4f
-
SHA512
a67150e026abe20aafb33d4e57a85ccf6b2fd814521601601fe1dd00895d7372a32d12286f903e20510164222033ee2fb7be5f3deae64d81a3f6ebb2117efba3
-
SSDEEP
384:0JGLdOBIM2sNmO2NU27BzFeZe3PSWim5CBEuC9ahiyBtTwN8V:0JxBIzDOG7lF93PSpvCuwah7t28
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba322be2a36f5d5e9c29a18c37ac338b_JaffaCakes118
Files
-
ba322be2a36f5d5e9c29a18c37ac338b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE