Behavioral task
behavioral1
Sample
0d988283056dd80e0e9b5c67068bc7d5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d988283056dd80e0e9b5c67068bc7d5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d988283056dd80e0e9b5c67068bc7d5_JaffaCakes118
-
Size
16KB
-
MD5
0d988283056dd80e0e9b5c67068bc7d5
-
SHA1
ff1352a4c67827ae8a2c3c201fb862ead7052635
-
SHA256
28976bf7d5bd3bef7492809a375272ebb758de7662942c218bb91f85963aa7c7
-
SHA512
ba591e7139ba9e6305f2427a65e0a0d90f507e5e2c10fdc26378294166a52b2980a26befa76824e7fa89c8fa5e78ff1d0c1b502bfcdbb3f49fee4c901b281901
-
SSDEEP
384:pxB2OMBTJbAwPNZct1AoB4p9jCc0JDMG853lyL:pxB27bAwPNZcrmjCcA4z3c
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d988283056dd80e0e9b5c67068bc7d5_JaffaCakes118
Files
-
0d988283056dd80e0e9b5c67068bc7d5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE