Behavioral task
behavioral1
Sample
0c70945d36886f202f1fa8d37b286bdc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c70945d36886f202f1fa8d37b286bdc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0c70945d36886f202f1fa8d37b286bdc_JaffaCakes118
-
Size
35KB
-
MD5
0c70945d36886f202f1fa8d37b286bdc
-
SHA1
88cba09681879b98bbec137107dc73bde6345276
-
SHA256
ddce15e1a9a0b51f01b1fe3ac4c2d316a67466e812e69298d0be23c1eacd5480
-
SHA512
e256d72e99880575b3cbe7b881891d9f542ae1316b403f006abdb7e467d6218417fbfb9ae5fc8032d7a6cc705b1f9195a60152fb051c2dcb766cbdcbdb63ac6b
-
SSDEEP
768:fKuqDX81z8dRVNlR7nbcuyD7UKwPl6bYa+iHw9d7oJseVDBm1ihdEh:fKuqDG8PPl9nouy8KwKcimqtY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c70945d36886f202f1fa8d37b286bdc_JaffaCakes118
Files
-
0c70945d36886f202f1fa8d37b286bdc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hello Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA