Behavioral task
behavioral1
Sample
542f7e09c717bd7630ea6b1880d3b641_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
542f7e09c717bd7630ea6b1880d3b641_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
542f7e09c717bd7630ea6b1880d3b641_JaffaCakes118
-
Size
4KB
-
MD5
542f7e09c717bd7630ea6b1880d3b641
-
SHA1
feed78005f639ef5b88402eaa2f8731cde088037
-
SHA256
75ff1f7f7cda2b8d6833a2af2db0dceccac741881ab2cb04a43ca161f262e766
-
SHA512
6aeb295fb46506fbdd71060d6e0c13fd529b383ab28843d2b9d0ceac718fb8d5594c06d1d0beee9e0928a9664c9fd7d6221ec67b45837298816ae2b9d8379033
-
SSDEEP
48:y2p6e5M+luOVwjqWPHN8DTB47Qvwr+CZWv9vTKB7JNwhAno2+Hy43zW2O:D54hHua7zwv9g7Jr+Hja2O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 542f7e09c717bd7630ea6b1880d3b641_JaffaCakes118
Files
-
542f7e09c717bd7630ea6b1880d3b641_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 655B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE