Behavioral task
behavioral1
Sample
0915660c9fa191f9b320d88b5b7bd45c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0915660c9fa191f9b320d88b5b7bd45c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0915660c9fa191f9b320d88b5b7bd45c_JaffaCakes118
-
Size
298KB
-
MD5
0915660c9fa191f9b320d88b5b7bd45c
-
SHA1
57c8c62d44cffdf2962c62c47c40283cf5e6619b
-
SHA256
d23b007d0a2c806a54bd17fb2fe4346197765b712c9de06061d51573d8b10f4b
-
SHA512
a8b979a45ea7c37fc64a79c1b6b66a3a4c1349b75df390fbe70f7cfe6e3e9de9f289279a2899b6d9b459c33b62bebed0a69fb8c9975beede25d3676794edca56
-
SSDEEP
768:DNhni71S9D4nbqjesvk506gMTUbuhFahxvfRtlxrXX3uKfIjptX3HYUceq/ePQc1:D8A2qjbs06Oahottl5X4jbHHvcz2X
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0915660c9fa191f9b320d88b5b7bd45c_JaffaCakes118
Files
-
0915660c9fa191f9b320d88b5b7bd45c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE