Behavioral task
behavioral1
Sample
0c0d64d156d8bd7f6984be52b71c4bbc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c0d64d156d8bd7f6984be52b71c4bbc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c0d64d156d8bd7f6984be52b71c4bbc_JaffaCakes118
-
Size
431KB
-
MD5
0c0d64d156d8bd7f6984be52b71c4bbc
-
SHA1
496bf22555f7757f6cbdccc977b1d30285e187b0
-
SHA256
13418bf3692776876742be9622d6792ba6f5f80f46a84addce43705988bd9cec
-
SHA512
a37a05b26e716edcb964c71a3b79fa9867f6fe122e9e0cdb304b092502cd806c1f174d2734e2f9264b12f1cb0206b2c25298be47092732e0fa7afe80ce2e9625
-
SSDEEP
6144:yMkSc2bG4iNbXIcmgVHr6gBCCe5dl3j+IsBX7Ag3NhuA:KSc21KUcmvCe5dlT2BX7A8hj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c0d64d156d8bd7f6984be52b71c4bbc_JaffaCakes118
Files
-
0c0d64d156d8bd7f6984be52b71c4bbc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE