Behavioral task
behavioral1
Sample
07c436e5c373e1562ccd33c4c4f01112_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07c436e5c373e1562ccd33c4c4f01112_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07c436e5c373e1562ccd33c4c4f01112_JaffaCakes118
-
Size
27KB
-
MD5
07c436e5c373e1562ccd33c4c4f01112
-
SHA1
2645913e01ceff8c48ffbc0f22de1def5fc3259c
-
SHA256
e3d5943abacbaf91e3033a5a0b75d68afd8c84d16ef52cfe2c28ee9b3c9054e3
-
SHA512
4c55e81429a7caf3d6fc246c001e1c99e014e8d2f40d27a6c1929e7b877535ebfd1502c0a906e81b2b9f0b3cc698e6a9d038eccced9d75841380c993bc0d3034
-
SSDEEP
192:qXpoJGXTY/UN/8bmKGi+berxI02v9bv05DetPjSkCfa3QeA0q:qXnM/UNUmbl02v9L0petPZCfUC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c436e5c373e1562ccd33c4c4f01112_JaffaCakes118
Files
-
07c436e5c373e1562ccd33c4c4f01112_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE