Behavioral task
behavioral1
Sample
01dbc874c1dd6b035d4ab6458cc9b4ca_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01dbc874c1dd6b035d4ab6458cc9b4ca_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01dbc874c1dd6b035d4ab6458cc9b4ca_JaffaCakes118
-
Size
7KB
-
MD5
01dbc874c1dd6b035d4ab6458cc9b4ca
-
SHA1
a7b97abcdf06087b3debb384a1b80d8b3c9a30a5
-
SHA256
49ab8ac457379e77cda39fb2078a3a00aad95453752f731145bd9dc83590eef5
-
SHA512
16365db375ce66612a2e33361ff0bd4d6723b743dbfb7cb84ac07160460bae3f4d87e5a04c7334bfd7a657e6623393509bbd77dd082d12a16ae0d74bc5a37737
-
SSDEEP
192:cXFXXjG7kZrxqy4cjitmb3jrjb9zvWoAXvWgqNG7aw:cVjG4hliOT/bNNXKL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01dbc874c1dd6b035d4ab6458cc9b4ca_JaffaCakes118
Files
-
01dbc874c1dd6b035d4ab6458cc9b4ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE