Behavioral task
behavioral1
Sample
173657e0d11318a03c5c896e78227d67_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
173657e0d11318a03c5c896e78227d67_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
173657e0d11318a03c5c896e78227d67_JaffaCakes118
-
Size
5KB
-
MD5
173657e0d11318a03c5c896e78227d67
-
SHA1
904dd0cc21c0fe7e78f858214c2da099d0133d78
-
SHA256
b99bd1b6f28428c30e405cc170aca6955120e3e61be41238e60af11619fb5986
-
SHA512
3928ff884a6ad13c59a547cf53f69b5bd1196c6492524b50fb67f62dde71c4ffaeb2f5647aecdbe07f22fe87e608f0f4156d7d77ec19e65d0ffa7b56c70a6ec7
-
SSDEEP
96:sJ+pHFUMyt9W/BWA04j0cnaUFbSc5IuV2aJSRGW2WWqVrzEQaXjuGPTy0B3nh5B6:sJeFUNW/BWADj4Sx552wSF2lwrzEQazQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 173657e0d11318a03c5c896e78227d67_JaffaCakes118
Files
-
173657e0d11318a03c5c896e78227d67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE