Behavioral task
behavioral1
Sample
cdfdc8d06e262d5c253016c3b0f8cf76_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cdfdc8d06e262d5c253016c3b0f8cf76_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cdfdc8d06e262d5c253016c3b0f8cf76_JaffaCakes118
-
Size
5KB
-
MD5
cdfdc8d06e262d5c253016c3b0f8cf76
-
SHA1
379314f9805b61c87a50f3f7278950a1e5427d2b
-
SHA256
5a78a7bf4b6caff255ceb255a4ba89f85065a30b49dab7c60bce3b0a89922ad1
-
SHA512
f26939809a1ea815c9546b3b5890a13aff23171f20f767819bb6894295ef059e5b93a9161a55b75ada445d54cc16b1b6fe6d77c73c5f040dd531053385a39354
-
SSDEEP
96:BLWL/42E8KLpRIW6qKxWl9tb1V00C1fPD5tdwitG+gS+nmU7XyzeX9PW9:V+42EBLpRIWRKxWXtbU0SPDTdrG+gHmf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdfdc8d06e262d5c253016c3b0f8cf76_JaffaCakes118
Files
-
cdfdc8d06e262d5c253016c3b0f8cf76_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE