Behavioral task
behavioral1
Sample
0a713495390b1e7f890c002c468e0769_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0a713495390b1e7f890c002c468e0769_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0a713495390b1e7f890c002c468e0769_JaffaCakes118
-
Size
185KB
-
MD5
0a713495390b1e7f890c002c468e0769
-
SHA1
1fa18fa25ff50ca13f1d9834ec35b6d19b6bf0ec
-
SHA256
c96e2a07c562e6440cdda0cd76ab176902c96398b39a703725d23c2a3be645d9
-
SHA512
00494f5e247a627fe3f1599d44f6fbd0601d1a3303e5dfe8a6f01dd739c8e815a2fec7786549d904ead40b8177538dd33b000715a87fffe667733319a183603d
-
SSDEEP
3072:XX4k61ETHiKBE8rCRuQReiv/8c1D9IB8UpI8frA3f1V7iHtGQlokQ+WOqH87BeEB:Xu1hK28RLc1hI3pR29VothVQ+nqc7HBI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a713495390b1e7f890c002c468e0769_JaffaCakes118
Files
-
0a713495390b1e7f890c002c468e0769_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE