Behavioral task
behavioral1
Sample
0fb91846ab9a4e9667c81154829f888b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fb91846ab9a4e9667c81154829f888b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fb91846ab9a4e9667c81154829f888b_JaffaCakes118
-
Size
659KB
-
MD5
0fb91846ab9a4e9667c81154829f888b
-
SHA1
b4101bdbd0eb2167e79eb2597689ef5927af84e2
-
SHA256
858ae3350ac3f7fc6ce235536e70b9eee1aef8df95fdc5d90bf67b825171e89a
-
SHA512
fb2d6159a90c2d48c63188920e36a98033e8b5fbee50b6bbde65ae0ca1ab1cba5714b6fbe42d526f85f3b334866978274f244b9b483e5f55a146592c1cf6fa3f
-
SSDEEP
12288:U2aKuIyyGBmRkLXFgjo0nJu4MNXP75Fz8k+AcsN8+B6DZGrhZsRX31a5Yax+5dHe:7aKuI4mYXFAqzJXB+AcsOk6DZGrhZec7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb91846ab9a4e9667c81154829f888b_JaffaCakes118
Files
-
0fb91846ab9a4e9667c81154829f888b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 976KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdat Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE