Behavioral task
behavioral1
Sample
bec25732fb9c314ad6d4a1ce19e0c184_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bec25732fb9c314ad6d4a1ce19e0c184_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bec25732fb9c314ad6d4a1ce19e0c184_JaffaCakes118
-
Size
5KB
-
MD5
bec25732fb9c314ad6d4a1ce19e0c184
-
SHA1
51194d8d318dc126d2405b943f741b40b2fb6f0c
-
SHA256
2db83da7c700abd11e86715756327dddfa99856c52cab6d4701365e6911b0cfa
-
SHA512
825122e3f0b68e5e4a2c8fdd3bbd69a77a912bb46637427ae5f190842295f89d0527826f50987f2980fbec9930c8208cfbe541186abc7323ddcfa9cc9b5bc110
-
SSDEEP
96:86zsU68NWUhRWS38nHplI5Wl4nswqnQh5lT2LJxNQ5H3M2s2Oo/t:3sRzUXMDzVnQhnTsw+VoF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec25732fb9c314ad6d4a1ce19e0c184_JaffaCakes118
Files
-
bec25732fb9c314ad6d4a1ce19e0c184_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE