Behavioral task
behavioral1
Sample
c23ae096e8f6353ea45158b879e31002_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c23ae096e8f6353ea45158b879e31002_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c23ae096e8f6353ea45158b879e31002_JaffaCakes118
-
Size
37KB
-
MD5
c23ae096e8f6353ea45158b879e31002
-
SHA1
c8f7d82171a102d793bc5408d5620bb08a9ef27e
-
SHA256
57d7e79874b820170a90c2c8d622acab0ade35f4d2ceae650a07e67e60eb06f7
-
SHA512
206cdd3cbbada962f66a4aa02ae75e20b50475463f4594d2daceef734cbc1503817f62c001447b39a6d98ab3c2ea7c195e91fc0bfc0a1fa0481d82b06f5dd027
-
SSDEEP
768:9p8wem8HwhadOp8wem8Hwhad2V/GgF/DcYBz0vQ25Q:9p8LmG4p8LmGoTNT0Q3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c23ae096e8f6353ea45158b879e31002_JaffaCakes118
Files
-
c23ae096e8f6353ea45158b879e31002_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE