Behavioral task
behavioral1
Sample
bde0a844710107321fd977689148595d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bde0a844710107321fd977689148595d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bde0a844710107321fd977689148595d_JaffaCakes118
-
Size
5KB
-
MD5
bde0a844710107321fd977689148595d
-
SHA1
6c733ba239803f33fae692e19c9af37803363da6
-
SHA256
40011e5a93875ee45b6d8985c4b119fda4039b2f989763ddc5946dddd81f4805
-
SHA512
73e443b0a1f6e7d096616241c213250dc74e2ebb611e8a67995c522fe5fdcb965c730f8c6dbeb78686c2c2c8af08f802ed7a8bf34818d5cd3ec67a76328f0717
-
SSDEEP
96:eisKcfZ+f8S+pjqdkpaw7w0XIcH3pVvuQHZoygNK6j+tFkd:evf8UqYaH8X5VvuQHpUKEd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bde0a844710107321fd977689148595d_JaffaCakes118
Files
-
bde0a844710107321fd977689148595d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE