Behavioral task
behavioral1
Sample
bedc13e5e8c5de4d3da0732afd372421_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bedc13e5e8c5de4d3da0732afd372421_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bedc13e5e8c5de4d3da0732afd372421_JaffaCakes118
-
Size
5KB
-
MD5
bedc13e5e8c5de4d3da0732afd372421
-
SHA1
292ecc8aacd0d971590e8b10bccf9ae331eaed60
-
SHA256
16ff0ff7989caa5ff560716e2f85ec3a1b157aec521aa69701e5402185fa9fdf
-
SHA512
4f6c6ca1c41e9e8d4811f4aa6bf7b21076420df1a0f7725eeb1e9097f3d48a50ca9c3e3812c0af21ccb894ec9fe5c9aad19e0956bd655c463c6944871ba3540b
-
SSDEEP
96:86zs0+4LQ6gU0j7RUowc23D5ZXmvEXUl1dgacAfDjF987WVTaS:3s0fc1jaoKF1mvxTdhTPFurS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bedc13e5e8c5de4d3da0732afd372421_JaffaCakes118
Files
-
bedc13e5e8c5de4d3da0732afd372421_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE