Behavioral task
behavioral1
Sample
1155a255011716784513fdb6cc2ed5da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1155a255011716784513fdb6cc2ed5da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1155a255011716784513fdb6cc2ed5da_JaffaCakes118
-
Size
5KB
-
MD5
1155a255011716784513fdb6cc2ed5da
-
SHA1
372d2ee865f8ee8885ff83e7b5fd7a64421a2bf6
-
SHA256
a59f5472a274c0fd59412dd16c5b6e2de6e68c18ae95eaaa68329090a9ced643
-
SHA512
2b2eeb1b1a6311c9427e7c2b77c5790da88b764c83249f8a9dc0c7264d2078e5e811231e13e97b8afe0f713ed11246c4645727428b8d770e06a61fe4190830f8
-
SSDEEP
96:86zsSr28x4LXo/RCpL+/feZRK0OCf0bQCGNrgI7nP5BRFCuAM46op6HCe:3sKP4LXMEpaeZg00cyshxCi46G6X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1155a255011716784513fdb6cc2ed5da_JaffaCakes118
Files
-
1155a255011716784513fdb6cc2ed5da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE