Behavioral task
behavioral1
Sample
0400d5ebabab92e8d09d719e8d23e240_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0400d5ebabab92e8d09d719e8d23e240_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0400d5ebabab92e8d09d719e8d23e240_JaffaCakes118
-
Size
173KB
-
MD5
0400d5ebabab92e8d09d719e8d23e240
-
SHA1
98ec540dfdfc57e2afa9f4545bfe494cf94236e9
-
SHA256
57f962214e82a4a03dfef4823a29f3522f0eb72380d90d9a13779f8494ffeed4
-
SHA512
3374f3bc4cf4e8d4d598e9326b1c2532d1f3250730d80aa3a0e1722fa82f3b90d1d23b169a38aae49efb6101fef720bdd7784832a96cfc7df238248af0ba589e
-
SSDEEP
3072:+0DmAyRkfsqSYXeXGaYVB228ljSkarG8ywaKn1guOBAga+XgO/a9jaBTccXMLou2:I1qZuGa8B22ajuYoMBY+XQSTcc4ok
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0400d5ebabab92e8d09d719e8d23e240_JaffaCakes118
Files
-
0400d5ebabab92e8d09d719e8d23e240_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE