Behavioral task
behavioral1
Sample
0d8fe714c62674043093a5c73c82feef_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d8fe714c62674043093a5c73c82feef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d8fe714c62674043093a5c73c82feef_JaffaCakes118
-
Size
123KB
-
MD5
0d8fe714c62674043093a5c73c82feef
-
SHA1
a46967a0a119ebb401abfb432b0bc546fcffd73c
-
SHA256
d88c9b6947f48a0bdef0af8eeb76480da5ab2748a58acaf35fdb46fb5c7b5750
-
SHA512
7860108f0d20e6d7a210a58a5f9557911d9829bb9336bf0531a5f66dd77fe2bdfb8f274ecb6e5d79c50d481229c9be1daa149bbda0e8f1f4d8631021a1c99365
-
SSDEEP
3072:Eb9Sb1K9HK4CTbdcsvFWj+eDafue7o0qQk0BVkY3Poutu:E5SbwRK4CTbd9W7Dan7o0TBVkEPoS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8fe714c62674043093a5c73c82feef_JaffaCakes118
Files
-
0d8fe714c62674043093a5c73c82feef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE