Behavioral task
behavioral1
Sample
d344f1620ac8cd96afe48b4292639ef2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d344f1620ac8cd96afe48b4292639ef2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d344f1620ac8cd96afe48b4292639ef2_JaffaCakes118
-
Size
7KB
-
MD5
d344f1620ac8cd96afe48b4292639ef2
-
SHA1
9d57407b36aaff493bf8331e72d793d3dc4be9f5
-
SHA256
183e5c18795052f2ca829b51fcde482b4fa2800649ad090c42b601de6d073f76
-
SHA512
d69e13093c508ef6a63866a94861d36936e4b593476a56fc50d2c4c323dfd95a547292e3aa47c2c9ba519162fdc8a6eea1455139417cdb0dd82098c98d572651
-
SSDEEP
192:ERlccJKm8Ypph5YJ2f+NAG8tStXX1ladl5j:ERlccJB55YTNeS5Fladl5j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d344f1620ac8cd96afe48b4292639ef2_JaffaCakes118
Files
-
d344f1620ac8cd96afe48b4292639ef2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE