Behavioral task
behavioral1
Sample
f9fe5f34073bd52e3b97de5d0ab8b157_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9fe5f34073bd52e3b97de5d0ab8b157_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9fe5f34073bd52e3b97de5d0ab8b157_JaffaCakes118
-
Size
8KB
-
MD5
f9fe5f34073bd52e3b97de5d0ab8b157
-
SHA1
9a292200b6bd1fc23408c34f52bce63d79766fda
-
SHA256
92dbf42d295e425bdc3ee2fe8b6123ec5a3d04ec30d31651ebe852301e6a7ccd
-
SHA512
be711bf0bc8d3c99083e61e80eac890c7ab7052ef16298b1e0877e8555d79f453204361ddbef4bf8f0c4629dec796d99b10124e17cdb2f193348e5c1d37dbebc
-
SSDEEP
96:jdaQP1wml5gKWDiZdtAuTkWmMNqbNb198X1fEiB8sHC3LxszLuyk4OMGPQ8xLaLI:U41w4iKlLfqRC1AxszLWPQ8+aoboRX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9fe5f34073bd52e3b97de5d0ab8b157_JaffaCakes118
Files
-
f9fe5f34073bd52e3b97de5d0ab8b157_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE