Behavioral task
behavioral1
Sample
0c05b1840cde178584304f2b1e37d9e2_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c05b1840cde178584304f2b1e37d9e2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c05b1840cde178584304f2b1e37d9e2_JaffaCakes118
-
Size
73KB
-
MD5
0c05b1840cde178584304f2b1e37d9e2
-
SHA1
978008a0709dab7a136a0da486bcc6824198a5f6
-
SHA256
982dbbac537e317fa1322a706622c85359823464ee38f7d68e923f1e7ed3c2a0
-
SHA512
bb47aed560b2e261ac6e7eadafc0d197e30c17a76b940af874aec92971fc024c3f8de7dd3fc612afcc3f716d31cd172971af1f0c4317301bf873939d853ef754
-
SSDEEP
1536:e7VCXMBPXEkOkoNwmrjNjoINdPASyVzHq66dTXH16tpVnouy8l:eRKMhO5wmH3d6HF6dB6t/outl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c05b1840cde178584304f2b1e37d9e2_JaffaCakes118
Files
-
0c05b1840cde178584304f2b1e37d9e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 656KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE