Behavioral task
behavioral1
Sample
0a61f6c34ec4e1b43ed6ab22d37dba3b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a61f6c34ec4e1b43ed6ab22d37dba3b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a61f6c34ec4e1b43ed6ab22d37dba3b_JaffaCakes118
-
Size
139KB
-
MD5
0a61f6c34ec4e1b43ed6ab22d37dba3b
-
SHA1
e2796e40878eb47628aa5ff72e6a274c2cee9910
-
SHA256
46b9d6e9a02609967de6859aef5def06805bbddbb82fdbc34dc5318c538709b7
-
SHA512
651bf6479b92d1033b56db4149b8a334aee55073b5520833563e753607aacf1f5af49b118325bb23e45e7726eaabe76a259382fa6faee74c91e220fc0b8abf8a
-
SSDEEP
3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a61f6c34ec4e1b43ed6ab22d37dba3b_JaffaCakes118
Files
-
0a61f6c34ec4e1b43ed6ab22d37dba3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE