Behavioral task
behavioral1
Sample
f041cb56a545988127725ff708529d7a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f041cb56a545988127725ff708529d7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f041cb56a545988127725ff708529d7a_JaffaCakes118
-
Size
5KB
-
MD5
f041cb56a545988127725ff708529d7a
-
SHA1
93c824b28fb3d95cf5147e2e07d06d7288a622fc
-
SHA256
2f47ca1471e0b58337801951cad3d6388755062f203491aef7ae7c5d8ddc3fc6
-
SHA512
e92e427d303a4cc687f746cffa7507bb59a26a5b1000b006e45e0d3aa302bb1bd5339e1bdc039c27a6cd95f8cfd6dccd71d6f59d5a33d26a0862d275c9668dfb
-
SSDEEP
96:86zslNC0ol/XxNlfaPV8ikkX2XabQ2wixcOjSi0WkJYSFx04xYxTX6+I:3slQ0ol/hJivmXjixcOjP0pnLxaDs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f041cb56a545988127725ff708529d7a_JaffaCakes118
Files
-
f041cb56a545988127725ff708529d7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE