Behavioral task
behavioral1
Sample
28a8e16b3897a1bf6c8e14d602bfe2d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28a8e16b3897a1bf6c8e14d602bfe2d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28a8e16b3897a1bf6c8e14d602bfe2d0_JaffaCakes118
-
Size
23KB
-
MD5
28a8e16b3897a1bf6c8e14d602bfe2d0
-
SHA1
56c691371ac11bf36a42e7bdb8d8fb527c754151
-
SHA256
b4dfa3b10e00631f6cef8a7739f6a795ba892d7323fc5023e1aa0b24c8c9ff23
-
SHA512
fb0c062fbe633f2b17bff1c5f7a24a220f35d0461785bed140a046e9cbe7c79077eb9d743f86e625ee9199b7238484894188c0133045e593abaf1c8490c0fd9d
-
SSDEEP
384:OnaF+g+H5AUe9vs1sfl2SU/2FTSJ5Rj92Y0SZSq+0m8rAqeRkbcv:OaFW69k1w2SG285b2YfSrh8Eqk/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a8e16b3897a1bf6c8e14d602bfe2d0_JaffaCakes118
Files
-
28a8e16b3897a1bf6c8e14d602bfe2d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE