Behavioral task
behavioral1
Sample
04b0a835ecd06808974e07e155b071ca_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04b0a835ecd06808974e07e155b071ca_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04b0a835ecd06808974e07e155b071ca_JaffaCakes118
-
Size
387KB
-
MD5
04b0a835ecd06808974e07e155b071ca
-
SHA1
ed6635ece092da03e2d8dd4b739802ab1bd1ed2f
-
SHA256
ca48ec381c47f6de04a20db5ac5cd7d543a13c10f72e67cdf840a663ab7a7f51
-
SHA512
d0ca0129450201a8cf66a7b9ebb03604f160db10f5462788e7749388d64b617bc65c35b1af9de4aaf24eeb777b1e16807f3cf487ab427ff6dd4aa6e7d746c65c
-
SSDEEP
12288:ftRyuLgreuxK8Vho8Bszmw4ljYewMI8SoS:DyPo8VlsStjOM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04b0a835ecd06808974e07e155b071ca_JaffaCakes118
Files
-
04b0a835ecd06808974e07e155b071ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 379KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE