Behavioral task
behavioral1
Sample
13e03781c6781960d79b4b15bc807417_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13e03781c6781960d79b4b15bc807417_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13e03781c6781960d79b4b15bc807417_JaffaCakes118
-
Size
5KB
-
MD5
13e03781c6781960d79b4b15bc807417
-
SHA1
6b5558190db5f53f89780096e82fff82123a716b
-
SHA256
62b9d6d19659d154a333609d5d0ef199db6c1d92c801ff72605061d331d4bea0
-
SHA512
145103c18e81d74be90660a10af2bf65cc7ffe8dd8a094bfe2a287a29a207f24ae293befdb6c59892400d77fcc6cd40d02b3d7022e9bf68c6dc2d2d85e925c17
-
SSDEEP
96:86zsVb/3E6syfIVYuAfNmcvsSAZBdyM2JBW2ZigpYe/6ljecZ6GZjFW1:3sVbPEIfu3Asd07ZFQ68jFW1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13e03781c6781960d79b4b15bc807417_JaffaCakes118
Files
-
13e03781c6781960d79b4b15bc807417_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE