Behavioral task
behavioral1
Sample
bddba3f76f3765467f9df6981c223645_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bddba3f76f3765467f9df6981c223645_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bddba3f76f3765467f9df6981c223645_JaffaCakes118
-
Size
25KB
-
MD5
bddba3f76f3765467f9df6981c223645
-
SHA1
286fc225ac1a4c82a8f20daa92ca065171debcd8
-
SHA256
c1388bc42ff7089b4806151c30ae8f625ae8e4f20537db57b52c171cce4e4646
-
SHA512
d1630f28f537377885348131097a6760062de7f35186f9ace4eac16b4ac37cc015ae0ff1f8f7473c99020882b8d5948b4dfd260f1632e2629d3461a9a155febd
-
SSDEEP
384:SIj4sa9AZ2Agxz0bKNrqbXZBduPP5tCIPSSgDzNuurHYsw3rw6kF0TorNujITffS:SOn0AozgKNW7TduPP5ESkvwbo0/ITf2T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bddba3f76f3765467f9df6981c223645_JaffaCakes118
Files
-
bddba3f76f3765467f9df6981c223645_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE