Behavioral task
behavioral1
Sample
bdbc8b51a2aa02818c1dc034b970ecf0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bdbc8b51a2aa02818c1dc034b970ecf0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdbc8b51a2aa02818c1dc034b970ecf0_JaffaCakes118
-
Size
5KB
-
MD5
bdbc8b51a2aa02818c1dc034b970ecf0
-
SHA1
e0ca7cac0ad7e16fdced4eeb6bfd07d22f217f15
-
SHA256
c05a8f21296abcbeb1a85b63a3966be26118689179ef79f6239a089f70516758
-
SHA512
80ab503421c5f959642ba9db4f1b403161020be14ee1bb02e4f4c2905a28c0866c5f30aca19dc63963fe7ead4021d611da947545fc7fd3f9cd2451ea0f3b986e
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKg/eC:DOSp7sChepoC7A5jjMGu4qwnq3/L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdbc8b51a2aa02818c1dc034b970ecf0_JaffaCakes118
Files
-
bdbc8b51a2aa02818c1dc034b970ecf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE