Behavioral task
behavioral1
Sample
0fa852728f89006e03e7ea4f78e0fe50_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fa852728f89006e03e7ea4f78e0fe50_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fa852728f89006e03e7ea4f78e0fe50_JaffaCakes118
-
Size
244KB
-
MD5
0fa852728f89006e03e7ea4f78e0fe50
-
SHA1
c4fe7c413f50fc4c3be33c5b078e8181ae87734e
-
SHA256
cc665a9c27c64bcd69c56fc4a2463d36f82133ebddecd4f2d7375e615ec2bce3
-
SHA512
bd8c5702a2bd69b29ef29dd90d0f04bf9d07c5671167d1c271cc0d79339ddf4d53e1326e62aa9ae8bd86d08b45dbe1bdd538230e86d7cdf631ae548350fcae2e
-
SSDEEP
6144:0nz431EEI3ZEWaOtqJHrReF9iCSxkk83BI+DblIENMcr:0z4FEf3ZEWhtcRe7tKmDNn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa852728f89006e03e7ea4f78e0fe50_JaffaCakes118
Files
-
0fa852728f89006e03e7ea4f78e0fe50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE