Behavioral task
behavioral1
Sample
0358d3bc8db315c4ed849fa50705e0b3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0358d3bc8db315c4ed849fa50705e0b3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0358d3bc8db315c4ed849fa50705e0b3_JaffaCakes118
-
Size
1.2MB
-
MD5
0358d3bc8db315c4ed849fa50705e0b3
-
SHA1
3a997ab66332c9f4e6dc0e8dfe48f2855e4ee1bd
-
SHA256
5e06d0169d4780c4ff6ab53849d6de2b8df6556b801c25450eca3ec4850e1f2f
-
SHA512
7f61b8766e56962024dc8a3c4ea46373d71ff0bc522c376a925d4078a7605f307167ae2f3b0e294360daec32b1a8819c7e9614dc31d3716788424ed4f3631cda
-
SSDEEP
6144:Jfmx5VjQrhTHfN5SzFSYbGjf4ix5HnR1g5QaQu9g4e1M0+dPp:wDVwhT/NcZviAixV7aQu9qM0+dP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0358d3bc8db315c4ed849fa50705e0b3_JaffaCakes118
Files
-
0358d3bc8db315c4ed849fa50705e0b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 367KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE