Behavioral task
behavioral1
Sample
0bfd10c0314651408990a1aa2155252e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bfd10c0314651408990a1aa2155252e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0bfd10c0314651408990a1aa2155252e_JaffaCakes118
-
Size
195KB
-
MD5
0bfd10c0314651408990a1aa2155252e
-
SHA1
41568fd4c02e098c12e54f205171788df91e9e8e
-
SHA256
0f3626dbdb470434c0aaa33358bf4ea5683e5f940d603cca226af0b01dcaf118
-
SHA512
7ca80d53369cb57f6ef7aea0bda5b6cb00144554300171f252d7d6d8b82a0b42eab3f77fccf0694deee7bd7d8c12a4c49ef16e88edeaab6a187a0e3e893e306c
-
SSDEEP
6144:/mqDThMqmQB7W5GIUAGtjbp0ZReOOkCfeKeZFV7DoSy:/mqXqQFSU6ZReOCGKWtoSy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bfd10c0314651408990a1aa2155252e_JaffaCakes118
Files
-
0bfd10c0314651408990a1aa2155252e_JaffaCakes118.exe windows:9 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE