Behavioral task
behavioral1
Sample
d35d7206065fb233f60d7ff600d38616_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d35d7206065fb233f60d7ff600d38616_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d35d7206065fb233f60d7ff600d38616_JaffaCakes118
-
Size
5KB
-
MD5
d35d7206065fb233f60d7ff600d38616
-
SHA1
5d1287d66dba4e0e1a93b579b59582b7f1135039
-
SHA256
2f3a26021a7dbaaf26d48ae058c5f56c9a6bd18b1946108c37e790f671177ae4
-
SHA512
912bbb17a76acf3ff14322447d379c04613da554f6ba995118f5cc376a9574e329051ee9ea1eff3c0a559893cd22573062f0af815a4f4a3f69a4536bbfc4ba08
-
SSDEEP
96:sJ+pH6lySVWm76HOu+zHFaGzAo3/LpgdIiWkU1SHy3kMap2aHti3pXYqBcyPRjlH:sJep8uMiGDSdZU1SHCkMap2aHtiZYGcE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d35d7206065fb233f60d7ff600d38616_JaffaCakes118
Files
-
d35d7206065fb233f60d7ff600d38616_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE