Behavioral task
behavioral1
Sample
05a97b97a1c99a4fd62580dd5b4d064e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
05a97b97a1c99a4fd62580dd5b4d064e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05a97b97a1c99a4fd62580dd5b4d064e_JaffaCakes118
-
Size
6KB
-
MD5
05a97b97a1c99a4fd62580dd5b4d064e
-
SHA1
b6b64b6f578fdf47ec0aa6b6f340d7947da2ac77
-
SHA256
aaff6f91644d492638c0f8c1fec95de81083601bc56ff3b248f4c6f3fc82d3bb
-
SHA512
50e26c399492210aa198420e1cc12fae64b125285c86fe452057d102abb4258eea4c7b178df5dde68d4f4a0b45663786598add27ff0f09f387d9ff516a6313ae
-
SSDEEP
96:sJ+pHxOmLf+edlYd8X6uYIlCF1ec5tHPU9i79KiWxafDvLOMoQ/s2zvDqXe:sJexbjy8qu741d5JPUs9u4LTVoQv+Xe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a97b97a1c99a4fd62580dd5b4d064e_JaffaCakes118
Files
-
05a97b97a1c99a4fd62580dd5b4d064e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE