Behavioral task
behavioral1
Sample
df0c34eb090cb8a78d4ad27eb0085112_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df0c34eb090cb8a78d4ad27eb0085112_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
df0c34eb090cb8a78d4ad27eb0085112_JaffaCakes118
-
Size
5KB
-
MD5
df0c34eb090cb8a78d4ad27eb0085112
-
SHA1
d7024974a6dfb48862ea4aeebe76bcdf2c97a896
-
SHA256
494ca4db07fa4343ca738e7d6753bb0dd797d574f9bb9a77747d78d430262b5c
-
SHA512
bbd19895430bf7bd79d172955e9c1d62379382326e24fa19d08c2746d8727473c7969d3847c7f5a086fc7181d5fcde8e70c892aadac9b8e5ba5f158e13ca9f21
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKyvJC:DOSp7sChepoC7A5jjMGu4qwnqrvI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df0c34eb090cb8a78d4ad27eb0085112_JaffaCakes118
Files
-
df0c34eb090cb8a78d4ad27eb0085112_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE