Behavioral task
behavioral1
Sample
0d57edd60449ce2401ee81ab8dde7180_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0d57edd60449ce2401ee81ab8dde7180_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d57edd60449ce2401ee81ab8dde7180_JaffaCakes118
-
Size
53KB
-
MD5
0d57edd60449ce2401ee81ab8dde7180
-
SHA1
1bcf5db83fa88a8f159192cd6e856ef0303cb656
-
SHA256
7466a08f9bc78764a5f29fcf50b2f306a551ed93c678bb496fc8c5862aea2418
-
SHA512
a890d50728c4fe014612ccc86a8dfec963360cee68d1b7282c700ca439d9794c7c7bd86bfd52c97987c8a0464e169e720cc4ceebb8762169f3fa31a95b0d38d1
-
SSDEEP
1536:eGCjLIf/WiF0hTKqnaksntKNXhyQ/QHHTPv/1OMdKDg+mn:enMF0mRMkQyTPv/7KA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d57edd60449ce2401ee81ab8dde7180_JaffaCakes118
Files
-
0d57edd60449ce2401ee81ab8dde7180_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upX Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE