Behavioral task
behavioral1
Sample
28b0a057b9077b9425532dfc7a7326d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28b0a057b9077b9425532dfc7a7326d8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28b0a057b9077b9425532dfc7a7326d8_JaffaCakes118
-
Size
5KB
-
MD5
28b0a057b9077b9425532dfc7a7326d8
-
SHA1
33ebdbb5ff77219bf07e5a45d7641ae72e721ec2
-
SHA256
78def6aad127f9b51cef1ecffeeb2532375373afbf73504b0bf0c63af332c2ab
-
SHA512
972ff1d317523e1964b1fb493d60852a80a0b0451677d846c9b11af0c0576e235445e9ed20ddf0358ff3badbb3d127f1cebe1e33d6caacdc42b78a028cdbf454
-
SSDEEP
96:86zskByKFYqyjb3UuP8ySAhDJgqu28+cjf1unyGFCf/C//DQOQfYRmLn:3skxFvyjzbZZJur/f1oFCfqDBQfYa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28b0a057b9077b9425532dfc7a7326d8_JaffaCakes118
Files
-
28b0a057b9077b9425532dfc7a7326d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE