Behavioral task
behavioral1
Sample
0de15ebcb75248be321dc88acb40544a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0de15ebcb75248be321dc88acb40544a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0de15ebcb75248be321dc88acb40544a_JaffaCakes118
-
Size
238KB
-
MD5
0de15ebcb75248be321dc88acb40544a
-
SHA1
25e3ae341cf6e608cd832474d1bd68be5e3771c9
-
SHA256
7d4ad4777e1f5735ae6e76ae3b2058ed925e9e83824577392c732751fe76919a
-
SHA512
dd8167ea3308beb8a8600b1af464d83d8aa80865b801d3cf121baafc8a05308629826646dfb65527c62713dc94ba3d0786fcdd11a91bb0c3fa8eae36b0ecd146
-
SSDEEP
6144:8bVHui9H3GLlpJsDmYDU6WWZBdEfOtrEQ/:0VH7H3aJCmYDaWnj9/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0de15ebcb75248be321dc88acb40544a_JaffaCakes118
Files
-
0de15ebcb75248be321dc88acb40544a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE