Behavioral task
behavioral1
Sample
bc72d5e69d006c0f2877ce734091412d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bc72d5e69d006c0f2877ce734091412d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bc72d5e69d006c0f2877ce734091412d_JaffaCakes118
-
Size
5KB
-
MD5
bc72d5e69d006c0f2877ce734091412d
-
SHA1
9c29079ae3c96f70b96fb75f0474231a3054050c
-
SHA256
2e1236f69f6e054004039f5c734f359bac3aadd556fc5667f70f993432da39af
-
SHA512
0c63e3609cfc9a55d46cb87eef536f0c8340f87af5243b364a4dc394bbcabdd5f5e41ebb58d8af23095622b13687d9f9d964c9ad747ef0a8f294eaae9f37411f
-
SSDEEP
96:86zsyk755j8H7iVB5wEMo1acycQ+n1bfJlbYLWx2mlNRxmOxQxqkcl:3sykt54HwXMo1acyqn1bxuLWI8pGS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc72d5e69d006c0f2877ce734091412d_JaffaCakes118
Files
-
bc72d5e69d006c0f2877ce734091412d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE