Behavioral task
behavioral1
Sample
0e258959e4b0729549c45cb4ba1f35e8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e258959e4b0729549c45cb4ba1f35e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e258959e4b0729549c45cb4ba1f35e8_JaffaCakes118
-
Size
203KB
-
MD5
0e258959e4b0729549c45cb4ba1f35e8
-
SHA1
0af5815c14d06922e40c43315dcf4f74e196afab
-
SHA256
25919d685b2ceec431ece67f6b6b28a380c07980563390f4b73522ebb763b0f8
-
SHA512
81e3864590d669eb92080c98f03beb1ea5d6356dda827c90edd9984958280a8bf8777f2351610be53edca23b517d6b2885796de14b472380f4eea9e3300bb43a
-
SSDEEP
6144:wA55qAiM/DBlinOhRQozMlgkjMu0G+uVP/nGdh:X5qAfsGRF2gzuyudYh
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e258959e4b0729549c45cb4ba1f35e8_JaffaCakes118
Files
-
0e258959e4b0729549c45cb4ba1f35e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE