Behavioral task
behavioral1
Sample
c8ff8ce16550ec534b60709711951542_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8ff8ce16550ec534b60709711951542_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8ff8ce16550ec534b60709711951542_JaffaCakes118
-
Size
5KB
-
MD5
c8ff8ce16550ec534b60709711951542
-
SHA1
6ef131c331601b9922576bcb73ca6215f05ce949
-
SHA256
59104751832cf30d7bed7a7436ac282cc72e6ad56cd7989e23478e6b9baf862c
-
SHA512
0f97b6c6b5033b11043a5c795d50da84626ab5d7c4024e189e9a7e654e1bd5eff1d5682a68e7584312b0b33503302a0ad7fda09bcd67db5e11943abc32ba0ddb
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKT05:DOSp7sChepoC7A5jjMGu4qwnqp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ff8ce16550ec534b60709711951542_JaffaCakes118
Files
-
c8ff8ce16550ec534b60709711951542_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE