Behavioral task
behavioral1
Sample
0193102d8897b78fc946375caf5f8cfb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0193102d8897b78fc946375caf5f8cfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0193102d8897b78fc946375caf5f8cfb_JaffaCakes118
-
Size
5KB
-
MD5
0193102d8897b78fc946375caf5f8cfb
-
SHA1
3afec938b5a383735bc294a17eb70b43182ba6a7
-
SHA256
79d286eb691e83b81b3b1180655454bc5c8e2c93c317f4df550999bb205f0738
-
SHA512
1cbbc5aa4a188b116af9151e121c75ae0cd5b2d40b0ce2dd0d44b09fb094605bf1ea17bccf2b62c3444a1a9dac69bc2c349b48c9089310c3ea4c34783d01c433
-
SSDEEP
96:s6FMesH+oIVCO8niFSLA03e2nk8gcQLAlsl3oszgFeLYeRxRy6emgNInlm9:s6FMeU+oIV1FFSbO2nkfcQUM3oWUcYek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0193102d8897b78fc946375caf5f8cfb_JaffaCakes118
Files
-
0193102d8897b78fc946375caf5f8cfb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE