Behavioral task
behavioral1
Sample
178ae11b7172a1d041fa7ffa47f75232_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
178ae11b7172a1d041fa7ffa47f75232_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
178ae11b7172a1d041fa7ffa47f75232_JaffaCakes118
-
Size
96KB
-
MD5
178ae11b7172a1d041fa7ffa47f75232
-
SHA1
a75642c21fe55059d0a2e5be681755a8ef0770cb
-
SHA256
7c2878b9705233d9e4f77fdcb50fb3d36e893cf0232ef48b027645ff037c5908
-
SHA512
fc149ddacb20a13896ec779b664c9d7a7d12352c529d42aa9b9c177c7ccdd50386af9f03e4bf0ddbacf4cebf83e61cd4f909595790278f8ba1fad0030505a512
-
SSDEEP
1536:s9Z3KcR4mjD9r8226+rTuVr8N0jjVxUgQii8ACHIfM0w7R93qhfVJr14NO:sr3KcWmjRrzSryVr8N0VxePCHHQfVJek
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 178ae11b7172a1d041fa7ffa47f75232_JaffaCakes118
Files
-
178ae11b7172a1d041fa7ffa47f75232_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE