Behavioral task
behavioral1
Sample
0fa78fc1123d037d0b330fa7944c9b55_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0fa78fc1123d037d0b330fa7944c9b55_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0fa78fc1123d037d0b330fa7944c9b55_JaffaCakes118
-
Size
74KB
-
MD5
0fa78fc1123d037d0b330fa7944c9b55
-
SHA1
3e4fce1474405c7a1e1d8d6b0737051afd7a727b
-
SHA256
49187a6be9e806666a7567df4340f4b360e3c732918c799e90d39de6445f89c6
-
SHA512
07bb8b1b78c540414bad23ee555dc6fb348107bbcb5ee33828912b4d98076978d06c9865e850a455c6f05bed5a07c6e4db39409a09ca02d10c3f9cd07a66d7b5
-
SSDEEP
1536:zG6qxVnlzzpT7gqZns2tNtuku3SuhBQE9G3eq2eryMT:zG6uzzpPgans2V6SMeEY3d2oT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa78fc1123d037d0b330fa7944c9b55_JaffaCakes118
Files
-
0fa78fc1123d037d0b330fa7944c9b55_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE