Behavioral task
behavioral1
Sample
081e8f34a421c05c954bfaca31426557_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
081e8f34a421c05c954bfaca31426557_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
081e8f34a421c05c954bfaca31426557_JaffaCakes118
-
Size
19KB
-
MD5
081e8f34a421c05c954bfaca31426557
-
SHA1
e5bd6a1de15ad93371c90513bc88e5d18eb39e71
-
SHA256
73558629d8298f1786bcc52c8a9f93f0059adc9079c6caf72dc12b53f1d18bf7
-
SHA512
6d82f2028dffb626bfcc8e7cf23624d1b5233ccaf1cc71a0d6fc48d2a9c7def3714b078b995033c70a3f2cd4a509b730f8e83337e5a4731c3d07443bd7902f8b
-
SSDEEP
384:Ex+WfMyka6Nq6M5JhlQUOFiVPlskVZ7ME6LVWijnwrVjuJZym22:ExSqXJoirskVx4LkNVyJZv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 081e8f34a421c05c954bfaca31426557_JaffaCakes118
Files
-
081e8f34a421c05c954bfaca31426557_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 536KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE