Behavioral task
behavioral1
Sample
0b5b2a1a1d0e5733e8aa3afac91da04d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0b5b2a1a1d0e5733e8aa3afac91da04d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0b5b2a1a1d0e5733e8aa3afac91da04d_JaffaCakes118
-
Size
401KB
-
MD5
0b5b2a1a1d0e5733e8aa3afac91da04d
-
SHA1
07fbee056704c8953b49e0f87828a55c94373012
-
SHA256
bf8140975b19198304a2b1294331ff8f0b1949d378bdc51f5aa99ddb6e124a9c
-
SHA512
4ef71f546f38aca86701ae2a1e952d6060090b4f912e364523f1cd3e69290bca0c9a3b5892e2e4db6c9230d7b766f6faab90ab7174ee3fe2a99280d644b678e7
-
SSDEEP
6144:CxcEz2rq+bhsbF7adgseHHiQwQc267/JzuSGpRhFyQ+d:CaEau+1sbF73HCQwQl67JzuD/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5b2a1a1d0e5733e8aa3afac91da04d_JaffaCakes118
Files
-
0b5b2a1a1d0e5733e8aa3afac91da04d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE