Behavioral task
behavioral1
Sample
262585ed35c4e70adf3b47a6c39d024a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
262585ed35c4e70adf3b47a6c39d024a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
262585ed35c4e70adf3b47a6c39d024a_JaffaCakes118
-
Size
5KB
-
MD5
262585ed35c4e70adf3b47a6c39d024a
-
SHA1
8d9ea3088992f0d97c84a6d8f8c7c2ee1d88b8d0
-
SHA256
7945a16bd7240a94e75f2d4f1b4a6e28fd7e694783559be6e92f62867cc1c2cc
-
SHA512
ced84ba8a3f2c4b59250b0e1d5b123a1415e82245f84db8cd398c71864d4389c6991d8508704719c6f7dcc43bd4cc1ed030864ae184833a41aaa352c7f89ba8c
-
SSDEEP
96:eVnhVQEbGB83YsNPyhWMRxgo6XWTr7MyejzKw/yrkC5twJrGmUAsWuGOiAi9lrpg:eVwyAWYsNqhWoxgoG2HIzKKWk6wYmURl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 262585ed35c4e70adf3b47a6c39d024a_JaffaCakes118
Files
-
262585ed35c4e70adf3b47a6c39d024a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE