Behavioral task
behavioral1
Sample
0aff92c7e671d5080d38cf2ce2ce45d8_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0aff92c7e671d5080d38cf2ce2ce45d8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0aff92c7e671d5080d38cf2ce2ce45d8_JaffaCakes118
-
Size
162KB
-
MD5
0aff92c7e671d5080d38cf2ce2ce45d8
-
SHA1
b374db852ec0db7eb15154ddfd9ebddfe957907b
-
SHA256
47f4bdd95543678045e9bcfc6b3e33fb3231f512063368a15fa8887974017bbf
-
SHA512
87a7bcab527d9091515f9e42a5fb9856870b5b5002a595a1a0ef8795b84b589ccb02e7af4b53e8291dd9b4d76a8617406d05fbb7b948f79ac6826fffeb5d53c6
-
SSDEEP
3072:evewat5Vdi2bjWF4sAHFEBIn9LuVe8gsvX5Er9W+IahKenfjFadvdjOufwO1U:ewxkFEFEBI9Sc8gUX5YtIpefjWOufwKU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aff92c7e671d5080d38cf2ce2ce45d8_JaffaCakes118
Files
-
0aff92c7e671d5080d38cf2ce2ce45d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE