Behavioral task
behavioral1
Sample
530fba32060fd246ac5b855f6c855c10_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
530fba32060fd246ac5b855f6c855c10_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
530fba32060fd246ac5b855f6c855c10_JaffaCakes118
-
Size
84KB
-
MD5
530fba32060fd246ac5b855f6c855c10
-
SHA1
26fb1ce346d9c152567def587c9ffd1fadab268c
-
SHA256
7d9eabe0dca1dea54e906f8edb3815ff0a808901f07883bfd9ac167238e21e99
-
SHA512
325e73a1a92c23a924c6509db70886b4f2c34c9a2d8b08464d34749874abf23b3265ac9d7c76816d64423965e35060c62d56f2b7f0d9ee9ae52915d06a7b4b3a
-
SSDEEP
1536:OGsHnu19km9LgBAXdYWQt34E7XVKMUaSlxciAGnOn1nT0:iH29b9kBAt6tIilaaSlXznO1T0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 530fba32060fd246ac5b855f6c855c10_JaffaCakes118
Files
-
530fba32060fd246ac5b855f6c855c10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE