Behavioral task
behavioral1
Sample
c81e850b7891ea19b427e4b70c2f0c8b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c81e850b7891ea19b427e4b70c2f0c8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c81e850b7891ea19b427e4b70c2f0c8b_JaffaCakes118
-
Size
5KB
-
MD5
c81e850b7891ea19b427e4b70c2f0c8b
-
SHA1
c75a8ae6101440dce0ba087b5f2845b8a6f648f8
-
SHA256
40e0cdb2f7f35f2ba1f882b715fdc8c5c4f1137d79aa4b7e96b52d95895cc4c5
-
SHA512
8185bb95ac84901b94a6d0843a30a5403b0b372621e43325fc4894db220c1fb2eaaa2571c7edfc12bae8c5d228e373a7e475d21cba29dd02c323df9107c274e8
-
SSDEEP
96:86zscWAW1FgsZexFutCJVMkBkdGeCaKrrZE8SZNfTytNITpRexkj8HW1NBhczgr:3scWD34xFutLkBkdvKfZJSZWOR8S8E5r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c81e850b7891ea19b427e4b70c2f0c8b_JaffaCakes118
Files
-
c81e850b7891ea19b427e4b70c2f0c8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE