Behavioral task
behavioral1
Sample
d28838f3a2753c6ef0758d4458ad1f03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d28838f3a2753c6ef0758d4458ad1f03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d28838f3a2753c6ef0758d4458ad1f03_JaffaCakes118
-
Size
5KB
-
MD5
d28838f3a2753c6ef0758d4458ad1f03
-
SHA1
18c397127696e153c7ef86998ec4e7c9ebe2cbe2
-
SHA256
59e498dbec501e37a4c61e75856ea8eec23355c73106f1bf6edf3fe30eba7ff4
-
SHA512
52dacf09a12844718f8e6fd1b689c7f418ea456602a4e7deab5be5f95248f1956f93489a39b348b7ef222ea1be34a120e3b180d512858d68b5cc52a71027106e
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKX:DOSp7sChepoC7A5jjMGu4qwnqK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28838f3a2753c6ef0758d4458ad1f03_JaffaCakes118
Files
-
d28838f3a2753c6ef0758d4458ad1f03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE