Behavioral task
behavioral1
Sample
bcb951167217d0a1d3ffe0b28018ee6b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bcb951167217d0a1d3ffe0b28018ee6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bcb951167217d0a1d3ffe0b28018ee6b_JaffaCakes118
-
Size
23KB
-
MD5
bcb951167217d0a1d3ffe0b28018ee6b
-
SHA1
b636eacba9cced473246d15d0696593b75fe4adb
-
SHA256
29994f7ffe590f7e30c54dbbfa5f5c53a91de908edca0b62b7b18d12badf7ee9
-
SHA512
2c3baa6453759dc5515cc88843fb6bb41f00dc123429ff36d4d95651e22bd4aac3c401f2606149fc0eac989028549d28d153ea9af8bebf9ab30c7050e233a1ac
-
SSDEEP
384:mW/Efh8SgjgrbZ+fRLP9onB8lRv0d6UOidmlg27CIumrajVwzkGPcfZL6DzIFkGN:bsh8SgcXZ+RKM0dEidouf6ajVqGZqZqN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bcb951167217d0a1d3ffe0b28018ee6b_JaffaCakes118
Files
-
bcb951167217d0a1d3ffe0b28018ee6b_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE