Behavioral task
behavioral1
Sample
077e923a03a6a0e187b770b3735bbe90_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
077e923a03a6a0e187b770b3735bbe90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
077e923a03a6a0e187b770b3735bbe90_JaffaCakes118
-
Size
6KB
-
MD5
077e923a03a6a0e187b770b3735bbe90
-
SHA1
060a7dea2d6320a258e3e8ab5063e6dbde832082
-
SHA256
a2138214b992781e0c31d131c83712b9baedaa9bea0665a51c1803a7c9b5e77f
-
SHA512
58ae9f3bb6c50bd17945fcef5162475fdbb7647bc0a1e5530748fb5931d5371f824536be030a61cad8d0a7f81bc87f55dea1a00faf557c522dc1c6660a82ca8e
-
SSDEEP
96:oFaweQroyHmiw5Rx6JHlyGQpRwsu4Mli7v5t9+UPAeLBTlLcFPM7bq:8aRQj1y4HlyG4Cs3Mlu39+UDLNlLq07u
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 077e923a03a6a0e187b770b3735bbe90_JaffaCakes118
Files
-
077e923a03a6a0e187b770b3735bbe90_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE