Behavioral task
behavioral1
Sample
c7ac8c7ea786281de1b1341bd97ed7bf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c7ac8c7ea786281de1b1341bd97ed7bf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c7ac8c7ea786281de1b1341bd97ed7bf_JaffaCakes118
-
Size
5KB
-
MD5
c7ac8c7ea786281de1b1341bd97ed7bf
-
SHA1
ffbe5d756c0e234795949158627ed269797ce66c
-
SHA256
585338f862e68f7ac9c9f49da6412729e8bcf4c60dad3aa116c5de30fe2c292a
-
SHA512
eb42d95dd20595976f31153190f5c6a9383a084ea0e9d94c4ac8561c19707d4a8473f7fa3201b0ec34c98634ab58ba6200e84d3ec1f9da5f7c4d5a59b799552b
-
SSDEEP
96:sJ+pHIgVZc1bf8kRWT05hN7bw2f1Al7jU/kYLbld7FE914591X:sJeI0khO017b91i7QkYNd8s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ac8c7ea786281de1b1341bd97ed7bf_JaffaCakes118
Files
-
c7ac8c7ea786281de1b1341bd97ed7bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE