Behavioral task
behavioral1
Sample
0d0e4698f0e2da034390d02e167d552b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d0e4698f0e2da034390d02e167d552b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d0e4698f0e2da034390d02e167d552b_JaffaCakes118
-
Size
48KB
-
MD5
0d0e4698f0e2da034390d02e167d552b
-
SHA1
cd11a952afaa18da77624f62971b5ffb1161113a
-
SHA256
75d29a44ef4122c8d98bf415bd0b5cf0de1de8b44c00825b9b73cd56fe2619e9
-
SHA512
9d344e91eb21dfb0591d04a038951e9f4ee4411231f6daa8e53b89c66a6866c70216884db5a42411229b930d6e48f8244dd7fb777818015d0a73d16c11a9a5ec
-
SSDEEP
768:1sX0a/N+tQ2xyBPkXgXZBbhUqYqkHK7GLXF72nynbcuyD7Uv:GLMtQ+yB2gXZBbhUDtHPrFinynouy8v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d0e4698f0e2da034390d02e167d552b_JaffaCakes118
Files
-
0d0e4698f0e2da034390d02e167d552b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 436KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE