Behavioral task
behavioral1
Sample
0cc772a75015fb045980b5233f785ad1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cc772a75015fb045980b5233f785ad1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cc772a75015fb045980b5233f785ad1_JaffaCakes118
-
Size
5KB
-
MD5
0cc772a75015fb045980b5233f785ad1
-
SHA1
1fc4ce4d66ee3beb32570391da09ad13574eb936
-
SHA256
1c382e1426e691e5b087c0f6d982c7588ee9b0464c0bfa90e496b611f42dca0f
-
SHA512
c5460e2cb9cc3b574c75f911f0012267eadba9f2f115b9ba73e2e1f8efb21243f7f8bd9b81e3be6f9a2962ed12ca3e75bc0bf4885c5ad5206f140090a010b776
-
SSDEEP
96:86zsi8EbuAMo4tBf3DGBpwlDJYJ5JG2ZJa17xHzELYjyjZ5j7b:3sfEbBMo4thDKpgJYJvTaENt5j3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc772a75015fb045980b5233f785ad1_JaffaCakes118
Files
-
0cc772a75015fb045980b5233f785ad1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE