Behavioral task
behavioral1
Sample
553d004757370018a63cd360fdce6409_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
553d004757370018a63cd360fdce6409_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
553d004757370018a63cd360fdce6409_JaffaCakes118
-
Size
405KB
-
MD5
553d004757370018a63cd360fdce6409
-
SHA1
3d4e7cb8bb151d0442ee61ddc5821e3a03d7c29b
-
SHA256
651b2cbf038d2c7a896edde6f86317e9e90c9312240f08cac5703447fc772c46
-
SHA512
809f63dcc44a65eaeadc1f3b1365fe7916ad797b5f5983ab3f6927922c1e5a08b48d28a0994dcb817374b1341a65d8d853d6fce444f001a0c4ffcaab66b5acce
-
SSDEEP
6144:AZvMG/X9q5B527SAagHvQMzUGxTAjLmP2/EI2kYg908GWKkT+JY2i:AdMWNIBMDbHmLL/w35JYb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 553d004757370018a63cd360fdce6409_JaffaCakes118
Files
-
553d004757370018a63cd360fdce6409_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE