Behavioral task
behavioral1
Sample
d2f213f4cec4625378d0bf3caad3418b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2f213f4cec4625378d0bf3caad3418b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2f213f4cec4625378d0bf3caad3418b_JaffaCakes118
-
Size
5KB
-
MD5
d2f213f4cec4625378d0bf3caad3418b
-
SHA1
0ebbae88da4334485120e2d2964b70f62bdb8ff8
-
SHA256
18991f9a709f8dd6b63920ad1ea89273324aa8f1c074971d80194a4350af8347
-
SHA512
5dbe90871b50ba142798bc783bd52740b1e03114734570d31cc55de020fd2c26d88139c65e4af606b0e4778a5a1b752372b5273306b9207875fa3a22658d4320
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqK1w9:DOSp7sChepoC7A5jjMGu4qwnqR9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f213f4cec4625378d0bf3caad3418b_JaffaCakes118
Files
-
d2f213f4cec4625378d0bf3caad3418b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE