Behavioral task
behavioral1
Sample
0b233b4bc57d558fde9358ea7e0a1de0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b233b4bc57d558fde9358ea7e0a1de0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b233b4bc57d558fde9358ea7e0a1de0_JaffaCakes118
-
Size
95KB
-
MD5
0b233b4bc57d558fde9358ea7e0a1de0
-
SHA1
381943f2d1ade962bdda80c185510335a8c6cf46
-
SHA256
70f3521618bdfa654a4f8f5c8b27fd85e4cf50390f7c3ee904362e00704d0c6b
-
SHA512
8160296e81f833203f5929050bd9b22cd4d7d28bcd66bb7d0d1a43f0e1832db2b6c81a19e4d97cfab96195e6a1ab0bcda45304d07ea6363045f37bf858c39ca8
-
SSDEEP
1536:9Awe/fNJPDur8D1HNd7GN5dZRWrfxZCS02fevLIi7tQpQwNjXHukQlWlAonouy8P:fcvhhHNy5HopZCS02eLN7BwJuGoutP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b233b4bc57d558fde9358ea7e0a1de0_JaffaCakes118
Files
-
0b233b4bc57d558fde9358ea7e0a1de0_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE