Behavioral task
behavioral1
Sample
089b3e8c66950c590e3df58cf3fd71f5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
089b3e8c66950c590e3df58cf3fd71f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
089b3e8c66950c590e3df58cf3fd71f5_JaffaCakes118
-
Size
5KB
-
MD5
089b3e8c66950c590e3df58cf3fd71f5
-
SHA1
22fc9412bd10d9903db989ab05a26960d28aaace
-
SHA256
748219be8769a4196e8a837a441e0e8840aabca2513fca74eb6cbd494aefdc47
-
SHA512
6be5708649fe60c0175c52ef565f181ef86a1f02de17fe5f41a9f258b583cb0b237d42fce00e769bd92eba59f008591b7f5631e7bef6f4b10c646d1cc297cd11
-
SSDEEP
96:86zsDW8GNTVgdNRzDC1IB3N0tM1b3hRw9SpMd+AQNZ3Si8YoLcjU/VBlp:3srkTadzDYIvhRRW+AQNZ3Si8FLLr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089b3e8c66950c590e3df58cf3fd71f5_JaffaCakes118
Files
-
089b3e8c66950c590e3df58cf3fd71f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE