Behavioral task
behavioral1
Sample
177f2bfbf4251dcc55b0d8721a15e23d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
177f2bfbf4251dcc55b0d8721a15e23d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
177f2bfbf4251dcc55b0d8721a15e23d_JaffaCakes118
-
Size
6KB
-
MD5
177f2bfbf4251dcc55b0d8721a15e23d
-
SHA1
ecb684195afe22e46916192d33fb7edb62d68c60
-
SHA256
62a29f33dcea0f9bd61bac24d1a5b02bd031fae154e57a12fd0995cbe03324f8
-
SHA512
9ebfce7110f280bf5cf7cab4202eb108d2ab81deea19afea5e1165f6df77eed47870407aa9293d9f5aedfba31e2a9818f80f82f1683b0e54a32a40598331dd41
-
SSDEEP
96:eAvblqiCf5N8ewA8Ie6JgQCf7XA//xr62SscQGYJZ0w193u+eQ:ewblqNIAo6JgQCTM/82SVQGS0E9F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177f2bfbf4251dcc55b0d8721a15e23d_JaffaCakes118
Files
-
177f2bfbf4251dcc55b0d8721a15e23d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE