Behavioral task
behavioral1
Sample
283e35ac1951da92619c49415b5623f1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
283e35ac1951da92619c49415b5623f1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
283e35ac1951da92619c49415b5623f1_JaffaCakes118
-
Size
10KB
-
MD5
283e35ac1951da92619c49415b5623f1
-
SHA1
992f1803dd82fe4bf89465adfab82560768d354f
-
SHA256
6cf38c01c59994be84caf54edc0c69927622a7fb8458cb5410b8829c2ddf53ff
-
SHA512
ce7ff30da2256f768adc7908ab6a2b7e977d51e280e1214c4a1963e5a3d109c7c39fcb54f415eb3f5f6d8eca9656d94d1fb7ce90542cd022a76edb9c8ea8f3e4
-
SSDEEP
192:51U9c3A3pJBIYDSazRt1pfcAxOrPpa7m/UoYlBPpH2kbcTnjQej:TU9cw3pJBIY3zJpfciixa7mUl/ZcIej
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 283e35ac1951da92619c49415b5623f1_JaffaCakes118
Files
-
283e35ac1951da92619c49415b5623f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE