Behavioral task
behavioral1
Sample
080a0240e5aa71f2ada1f75f2f469e6a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
080a0240e5aa71f2ada1f75f2f469e6a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
080a0240e5aa71f2ada1f75f2f469e6a_JaffaCakes118
-
Size
17KB
-
MD5
080a0240e5aa71f2ada1f75f2f469e6a
-
SHA1
5282a5199345ecbcb4f4f101c27f1108d61722e9
-
SHA256
8533fc4716c1048a92d05688615a3c34c0e0acb41578484667220b1cf618fcd7
-
SHA512
ac50c88d982e95a8fde2105d2b2a4c29f80e67abbbdaf0f66a135246cd3d06da3dd44f92c82c8270294ffd4d56d301157a087405335baa9625f08d6124af8681
-
SSDEEP
384:K1Cxtoeb5INPOd2Z4xJbe5zMjLTomiWh:K1CoebqpMWoCej/i
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 080a0240e5aa71f2ada1f75f2f469e6a_JaffaCakes118
Files
-
080a0240e5aa71f2ada1f75f2f469e6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE