Behavioral task
behavioral1
Sample
ded75a6d200967d1cb17b1f03376eea5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ded75a6d200967d1cb17b1f03376eea5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ded75a6d200967d1cb17b1f03376eea5_JaffaCakes118
-
Size
10KB
-
MD5
ded75a6d200967d1cb17b1f03376eea5
-
SHA1
36a890102517cf6671cf342b67745cb19d789b9c
-
SHA256
ab061b1cecfc4c6ac38d793a5aad72ba8c7662fba2955ab7ce4366b2419e0e8c
-
SHA512
971475844d90426350d319240118368f3d9836979266ac582f22b64617c16b0d0fbd6d6480b65806f045558537e58f8ada004ccdfa3e958df6c3964d8d412337
-
SSDEEP
192:HB9gdajHvSXtfAcM/C1RITtrx7WXXHuDpkLEqKQDWE:h9gmHutHM/C1STFx7EXLIqr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ded75a6d200967d1cb17b1f03376eea5_JaffaCakes118
Files
-
ded75a6d200967d1cb17b1f03376eea5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE