Behavioral task
behavioral1
Sample
01c955748f8465f1978e464152950d35_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01c955748f8465f1978e464152950d35_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
01c955748f8465f1978e464152950d35_JaffaCakes118
-
Size
33KB
-
MD5
01c955748f8465f1978e464152950d35
-
SHA1
7fe1d0ea8afc84e84dcdc325bd637d082f6e30f9
-
SHA256
ed7fe86910b4255c34a67b5d5b7ec2382a0c6d35df7d7f28a19b4713e601e39a
-
SHA512
00ccc0719ec95e1adb77a11e3e911a7b5d4332a6de9c75dd48e145cd1a3698c42482e9cf8f8b064507337de878e2b908625ed94625f88d0241a58a3db1b52482
-
SSDEEP
768:Vcimu33yUGonx9wSDDjdV/hOSQx9fPoY4mER9Ky:VDm0cmUSnbhYImER9Ky
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c955748f8465f1978e464152950d35_JaffaCakes118
Files
-
01c955748f8465f1978e464152950d35_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE