Behavioral task
behavioral1
Sample
d42aa6fff62c969465ce5e8d221ac701_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d42aa6fff62c969465ce5e8d221ac701_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d42aa6fff62c969465ce5e8d221ac701_JaffaCakes118
-
Size
5KB
-
MD5
d42aa6fff62c969465ce5e8d221ac701
-
SHA1
c75a39c823a8fe935dad30baf1b222800c1dcfd8
-
SHA256
4096bf100d5781d4bf925f5e66821663e3969ba2d93f9a9e0cf98db84f28aa45
-
SHA512
75c5338d543d982588e6a7fb2a1bf1e056c13e87d7af1ea9239a5e9a0df00842853748bfdc23f8f59ce2290ef3c6ae33f439b8f00ff7551839ca16d5b5b7e8dc
-
SSDEEP
96:86zs8osnv2f5Cel8+DQpR70mcp+ncBYBVhCGn/nb+4m:3s1snvY5Cqfw0mc0YYBVpnT+t
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42aa6fff62c969465ce5e8d221ac701_JaffaCakes118
Files
-
d42aa6fff62c969465ce5e8d221ac701_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE