Behavioral task
behavioral1
Sample
dca7067707935b686cc9da928639ce68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dca7067707935b686cc9da928639ce68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dca7067707935b686cc9da928639ce68_JaffaCakes118
-
Size
5KB
-
MD5
dca7067707935b686cc9da928639ce68
-
SHA1
0b3056fb33bd65ce1d09414eea478186df7af98a
-
SHA256
40ac2f920e1e43928140265be3a9dfed12d7de745b3a24f531c2f964a4d13780
-
SHA512
016c89470e3ffba94db1db9604e05bd0d8355873e1475c5417da36d9ac1d1b91df92f3e550aeee8d375c2bf7db68096be876a5d8c1daff898b2211feb81cf33e
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+ICnm1Y:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0L
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dca7067707935b686cc9da928639ce68_JaffaCakes118
Files
-
dca7067707935b686cc9da928639ce68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE