Behavioral task
behavioral1
Sample
071564fbbc42fa8771cf9951a6af160e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
071564fbbc42fa8771cf9951a6af160e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
071564fbbc42fa8771cf9951a6af160e_JaffaCakes118
-
Size
4KB
-
MD5
071564fbbc42fa8771cf9951a6af160e
-
SHA1
d64bf5b8501cd7d36c56b943d35b50e9f0a13414
-
SHA256
bd45bf54374ad5d12cd4f04d857733895825c9fe89015a0c55f63be8a5ca8659
-
SHA512
aa5c523e4078ea537cc23f3e70a4855283c36616be95babf77bc11c722eb544351a2a7b632c696947df843ce6eed6536d75c20af913c3c2fec5d5d9d46e75bf5
-
SSDEEP
96:86zs5Y08jw8GDKAQ1t8BQBagIUQFKbubsmZ7Diln4W5:3shFPDKAmGCBmUQFKSbdhDsb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071564fbbc42fa8771cf9951a6af160e_JaffaCakes118
Files
-
071564fbbc42fa8771cf9951a6af160e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE