Behavioral task
behavioral1
Sample
c97da719dff7e2e5c52dd9db7412c136_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c97da719dff7e2e5c52dd9db7412c136_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c97da719dff7e2e5c52dd9db7412c136_JaffaCakes118
-
Size
5KB
-
MD5
c97da719dff7e2e5c52dd9db7412c136
-
SHA1
7979130a60a8cefa0a0f1fe95a805ecd75e002d9
-
SHA256
c1d90ed5b2f45696b77c04935577455655ca3f1155464dc17aa83ae56f07b74a
-
SHA512
9ef938d4bc7727b1e6b348736b6e64b4cf057cd306ef73218f555832a4e569da53f833fe9d32503e06559996abae76498c8d89a50dcbcae5ce7258f417ae74a3
-
SSDEEP
96:ez84nzk3e4xOpQMkDK6EV3OyflcyjaYQhEvK3NItVOTKKC:eQIzku7QMT6EV3/baYQhEydIzWKKC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c97da719dff7e2e5c52dd9db7412c136_JaffaCakes118
Files
-
c97da719dff7e2e5c52dd9db7412c136_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE