Behavioral task
behavioral1
Sample
144555522846102a8c88911422aa6eaa_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
144555522846102a8c88911422aa6eaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
144555522846102a8c88911422aa6eaa_JaffaCakes118
-
Size
5KB
-
MD5
144555522846102a8c88911422aa6eaa
-
SHA1
bdb56417b8dc6a80aee538875e00027f733aefd4
-
SHA256
670fb11657302f3af41feda90a0faf4c00c9ce86374f9ee0b1bf4fb8b1bc7ded
-
SHA512
c8e3710eb9a7a86e5ecb60f34ce0b66cf9c0b47ae7ff3728fcb2c31900856bd57b6e7f422a2956caf36dbee294af5637dddbb366d538d098012491cdd5628638
-
SSDEEP
96:86zsi8EbuAMo4tBf3DGBpwlDJYJ5JG2ZJa17xHzELYjyjZ5jvtl:3sfEbBMo4thDKpgJYJvTaENt5jFl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 144555522846102a8c88911422aa6eaa_JaffaCakes118
Files
-
144555522846102a8c88911422aa6eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE