Behavioral task
behavioral1
Sample
0b86acfa7df79231b0a0cb2f03e520c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b86acfa7df79231b0a0cb2f03e520c7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0b86acfa7df79231b0a0cb2f03e520c7_JaffaCakes118
-
Size
3.5MB
-
MD5
0b86acfa7df79231b0a0cb2f03e520c7
-
SHA1
6b197b40947b452867a5f38d35013808a624ec8f
-
SHA256
a9baeae73cadf9306e3808cfcf5b38d5c55c199d99344e7227cbb92342ac1f75
-
SHA512
8bad4631c5705066ef4bbefe4452c1eb3c3d3e4d6812120c94c3316facc342f939f64af8aeacf334d55e249b61c1a54a36253265fa2da382076150453a7767a8
-
SSDEEP
49152:rnJ6fw4Kcf1xrQUr78NSj5Yi0K5uXp8kTW+k:7J6fDlf1xr5JbuZ8kT9k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b86acfa7df79231b0a0cb2f03e520c7_JaffaCakes118
Files
-
0b86acfa7df79231b0a0cb2f03e520c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE