Behavioral task
behavioral1
Sample
0cedd194cfdcb761bfa48da012f5d0b0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cedd194cfdcb761bfa48da012f5d0b0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cedd194cfdcb761bfa48da012f5d0b0_JaffaCakes118
-
Size
49KB
-
MD5
0cedd194cfdcb761bfa48da012f5d0b0
-
SHA1
ed3173524057628c3e11559c936924f4805f6d4b
-
SHA256
3c9a35300f4e05008b2c35dd2de39d9beafa0d81366fdeb68d4d15289bd86f91
-
SHA512
1c9ee7406413d583f1ce3554d3460a98c036e99940e35a55c55747cc12c163975ba08d6ac662d8bac83c3070f0c2b9824f0a4d8599fcf311507d3d3b1c9e6fe1
-
SSDEEP
768:DyEQSbjuQFn3TxmSkXR4KP90JyEJuV9Mt7Yke3e:JHjRFfWRZF0nuVStTN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cedd194cfdcb761bfa48da012f5d0b0_JaffaCakes118
Files
-
0cedd194cfdcb761bfa48da012f5d0b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE