Behavioral task
behavioral1
Sample
dde0f991d8e126fb656d8fdc0ac87105_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dde0f991d8e126fb656d8fdc0ac87105_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dde0f991d8e126fb656d8fdc0ac87105_JaffaCakes118
-
Size
5KB
-
MD5
dde0f991d8e126fb656d8fdc0ac87105
-
SHA1
cb5583f06d10732d6e83ad7d9c588fa1d0c3e293
-
SHA256
c8d197a61a429f2dac9ca9ba6da8a4a9cff47ce89d141a63d9984577c2ea695d
-
SHA512
b7931963af6a08015bc42e3ba13b42075da297d00321126ceba62c94957552b89a313ebcfa09416fb67c0b3ff6302bacfe0a24ef60c5685dc7efbfa3f46b97ca
-
SSDEEP
96:s6Fd7OGWqGQJ3iXZ8qgVAWxObkvhbGocQS15/6wvuvHj6f:s6FpyqGQMiqfWgwvhAQg/6bvHq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dde0f991d8e126fb656d8fdc0ac87105_JaffaCakes118
Files
-
dde0f991d8e126fb656d8fdc0ac87105_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE