Behavioral task
behavioral1
Sample
0e0cae12c5b19dc0ffe5c60ffb7b06ae_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e0cae12c5b19dc0ffe5c60ffb7b06ae_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e0cae12c5b19dc0ffe5c60ffb7b06ae_JaffaCakes118
-
Size
23KB
-
MD5
0e0cae12c5b19dc0ffe5c60ffb7b06ae
-
SHA1
22ec3bc9818f25dd066c29d205b6622c982d9018
-
SHA256
5d96adccbae3b8f4d017056b56569b3fa178ea42777da752223f893639d5fc5e
-
SHA512
31d0a1f4444a2a05cdc7e59632666c414ccba721fc22d240110e4c4fea75a36a1c221576853ee32a71f6832baf7def2db7ae59b34bb4a79844080fe023128832
-
SSDEEP
384:HyY8lFdzCTf+6e2RBTw9JJO1cLL3G2Q8+broOnyR5bVS9pV9SSHBv:HyY8xeFWTk1c/GB8oro0cVS9pVw2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0cae12c5b19dc0ffe5c60ffb7b06ae_JaffaCakes118
Files
-
0e0cae12c5b19dc0ffe5c60ffb7b06ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 57KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE