Behavioral task
behavioral1
Sample
0cd1210976bc8ba468da8d6c54e28f4c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0cd1210976bc8ba468da8d6c54e28f4c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cd1210976bc8ba468da8d6c54e28f4c_JaffaCakes118
-
Size
5KB
-
MD5
0cd1210976bc8ba468da8d6c54e28f4c
-
SHA1
8764fab34d36184260ed505f39f0a6ca29c5aca6
-
SHA256
c704bfb255a30e0670e647a85a06f8836e8442839f1365b72102d71abb2575a7
-
SHA512
12816e4244edc79e76ac5474c82fadcfd93922b82a05c83785ba70e35a01b6522fae40c10f507ba01cd93ce592aa37ae7f11f6e0d377f43f5b9c9a1c79af5a66
-
SSDEEP
96:sJ+pH0WYj6izjOWpymEcr0pNYoIeb4si6ODnMH/D5XAm2XGNxaIKzg:sJeOlUU0pN54siTDnMfD5QvZIKzg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd1210976bc8ba468da8d6c54e28f4c_JaffaCakes118
Files
-
0cd1210976bc8ba468da8d6c54e28f4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE