Behavioral task
behavioral1
Sample
10b301f8d1ec8dfd3e3865cc32ae1888_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
10b301f8d1ec8dfd3e3865cc32ae1888_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
10b301f8d1ec8dfd3e3865cc32ae1888_JaffaCakes118
-
Size
5KB
-
MD5
10b301f8d1ec8dfd3e3865cc32ae1888
-
SHA1
62d697507a568e662598da69962b4bbe9df7b466
-
SHA256
730bfc4cae445881e22caeba221c8ef444f7edfb1a1606c50f9c9ab120cf956d
-
SHA512
adf474d36fa9e16d4de261ae46d9ebaa408db894addb1edd583e7f6d6213b5871f933625a122a54dac8995198ed6dcc3c83af0a61237a43875e44cd5b85a00fc
-
SSDEEP
96:sJ+pHKFcPjuqyWG/1YU1aiwbG8OKelRDkmx7LM8yAr3jvcHp1Jwqr+3Z/JBiy:sJeq+y3aiwbCKezkmW8nAlwbJ/J0y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10b301f8d1ec8dfd3e3865cc32ae1888_JaffaCakes118
Files
-
10b301f8d1ec8dfd3e3865cc32ae1888_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE