Behavioral task
behavioral1
Sample
bbd263b5729e8f145e1ceba740896540_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bbd263b5729e8f145e1ceba740896540_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bbd263b5729e8f145e1ceba740896540_JaffaCakes118
-
Size
5KB
-
MD5
bbd263b5729e8f145e1ceba740896540
-
SHA1
df70d6b9f9c2967b45ababdd076c5c41b6d39880
-
SHA256
d72a19e7d696f247ba184c30e668f30a2ebd55843fa9056cb0c2db4444db9670
-
SHA512
df9872214252d7bd72130cf35470b3cbce501170f81ddabdee4702e0077141848068ed8dcaa77e82af88cc805126ef967c0ac35cca70a48ccb50a51508494119
-
SSDEEP
96:KebxlaX5fmvWSKUpACLFzbltVSTuyyJT/OxX:KuxUX5fmvBKUptvLDT/EX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbd263b5729e8f145e1ceba740896540_JaffaCakes118
Files
-
bbd263b5729e8f145e1ceba740896540_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE