Behavioral task
behavioral1
Sample
0913e4c122e7bcbca9209b54d8decdf4_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0913e4c122e7bcbca9209b54d8decdf4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0913e4c122e7bcbca9209b54d8decdf4_JaffaCakes118
-
Size
17.4MB
-
MD5
0913e4c122e7bcbca9209b54d8decdf4
-
SHA1
5e5f2b4e132620cc86efcbd47e885651d27d13bf
-
SHA256
46c38f5ef656080473f92b0ba37e803b74e630dfec5ff552a5579a3441c2583e
-
SHA512
6791b22e7c8c088954fc8162136b507c8437ee9ec7e2330a6387e58db6b5ba8b03df343a3ffa172e6d4da6b4be91adb028f46ffe0a6c0d79355ca558b32aabd7
-
SSDEEP
393216:tXB0ThkxQGyN7yrFUv+pzFS16RA9ukyiqG2DDBLcfjfLVqP:U6mGyN7yJUS5o59jyNLEHVA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0913e4c122e7bcbca9209b54d8decdf4_JaffaCakes118
Files
-
0913e4c122e7bcbca9209b54d8decdf4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 637KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE