Behavioral task
behavioral1
Sample
bec46392c016a5511251b6efa9a682a7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bec46392c016a5511251b6efa9a682a7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bec46392c016a5511251b6efa9a682a7_JaffaCakes118
-
Size
5KB
-
MD5
bec46392c016a5511251b6efa9a682a7
-
SHA1
e9d91997d660d483406f6e15c599b061f6f5db99
-
SHA256
1b72b869e47a8eca3bc4a8c2620448ce75e7929e6dae8d49ccd9ee93fe0cd165
-
SHA512
9ce593e457374e6c885736d582a520b16ab6b2d92af99d229ce8bfb25c0d300f3ab94ca915c102dc890d7751aa83df93037c0973199f698031c49c82bb04565a
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+ICnzt4WQ:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec46392c016a5511251b6efa9a682a7_JaffaCakes118
Files
-
bec46392c016a5511251b6efa9a682a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE