Behavioral task
behavioral1
Sample
bee1b09f4f9fad64a5a321e1eff74162_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bee1b09f4f9fad64a5a321e1eff74162_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bee1b09f4f9fad64a5a321e1eff74162_JaffaCakes118
-
Size
4KB
-
MD5
bee1b09f4f9fad64a5a321e1eff74162
-
SHA1
6a5eca1ed367c7776ec1b87f7b51fa38f4807415
-
SHA256
978ab5e1e68f1816d69f2673e169283f173b0a85664b424a0dc3cfd2b1d934d2
-
SHA512
1ae8d9131e2eafdb8b19236eacc3ce7354696ae0d3ac3a8d0bf77e7e21819a79013d50dc36fb2888432b9c0558c964c99fd85ba08f95b5f8af9c29125f017cdd
-
SSDEEP
48:6O+9muO0Wdzy1WrNJsi+KXhrkJ5XTTfZ4A6oGY08GZqQhNGUG+Rv98N9A6jBS3RJ:n+oj1dzycjo5XR41oGYLPWsi6jkxOCx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bee1b09f4f9fad64a5a321e1eff74162_JaffaCakes118
Files
-
bee1b09f4f9fad64a5a321e1eff74162_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE