Behavioral task
behavioral1
Sample
d55f91f7de45c0e39462ac5caf76f984_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d55f91f7de45c0e39462ac5caf76f984_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d55f91f7de45c0e39462ac5caf76f984_JaffaCakes118
-
Size
3KB
-
MD5
d55f91f7de45c0e39462ac5caf76f984
-
SHA1
9bd00c1bfc27bc476c73404665dc07cb20910105
-
SHA256
41c178c341967b5a5370e887a0c725e05b6d5fe0066db1bbb0f65df1f1ed52b3
-
SHA512
d86de7581729a1fdc6317c19db3a6527e01c882894a29572904507aba67413020cf5d49958a439e6efe7802304c5bb5c0e31474923b594d72166d19bbac0d6d2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d55f91f7de45c0e39462ac5caf76f984_JaffaCakes118
Files
-
d55f91f7de45c0e39462ac5caf76f984_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE