Behavioral task
behavioral1
Sample
0943abfdfc953b9a6d51521ed7330681_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0943abfdfc953b9a6d51521ed7330681_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0943abfdfc953b9a6d51521ed7330681_JaffaCakes118
-
Size
94KB
-
MD5
0943abfdfc953b9a6d51521ed7330681
-
SHA1
2eb54f000ac8ef831a272dfadbbe5487ff6e2e03
-
SHA256
cde63f5906e308d344157949ea540acdb08091e36a3191cdc2bbf67a0d5410c0
-
SHA512
9053af06168208734d1188b561ec2a9783eb2729ca0a3e2277e1af796d8f0f5d74adfeeb5bcc04b60b94c0eab6ad567f04f711bd7672a1a3eec0559b8b44cd79
-
SSDEEP
1536:EFiuZvr+DHY3WqiewZw+0T7m+ae0dsiA5z09lz75IsYm1mYWv+/4+2rlTPl5:E5ZY4cZwLT7mHe8siA5AlzFIFmfWvs4f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0943abfdfc953b9a6d51521ed7330681_JaffaCakes118
Files
-
0943abfdfc953b9a6d51521ed7330681_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE