Behavioral task
behavioral1
Sample
402a24b7528d84adab1fb223372573e7_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
402a24b7528d84adab1fb223372573e7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
402a24b7528d84adab1fb223372573e7_JaffaCakes118
-
Size
6KB
-
MD5
402a24b7528d84adab1fb223372573e7
-
SHA1
ec154f8d85a50fd946a981289072844aef5e38e0
-
SHA256
b2aa67e50470f205106ff7640e64e900c8fe40988a5aede8177a442a51705386
-
SHA512
5b25a65abaa204ae42e3cb91bb8efce9210bd7efddb2f1568a8e959480619a403f7fa0707e70e865359c4938ec911475de541958ae9b13e73c0ffc27163faaf6
-
SSDEEP
96:1JqhcGfg/SDJ6POnc2/lKFbuBGeaadFs/3vdNv/7BAMLgJwrtM7vocozPEYLJ:bqvYEJ20V+wz03jXaMLgitM7EYM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 402a24b7528d84adab1fb223372573e7_JaffaCakes118
Files
-
402a24b7528d84adab1fb223372573e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE