Behavioral task
behavioral1
Sample
0e0ce691947383087454ddd9563f0dcf_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e0ce691947383087454ddd9563f0dcf_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e0ce691947383087454ddd9563f0dcf_JaffaCakes118
-
Size
472KB
-
MD5
0e0ce691947383087454ddd9563f0dcf
-
SHA1
de12307e141b154f73f36637c78e9f087d69554a
-
SHA256
614eaec0c2fa2737d168c5778decf28056103523a0a585b649cfbbe655b1cd9e
-
SHA512
49073a169eb8ebed74e3170a541ea03f8f865bdd0b014bfba7dd7d7c4abc3d17d0093faf2149b06c19ed2e69aa33975ae981301af2533b6ed38d52bb1c3282af
-
SSDEEP
6144:2ARwLb6+lQwWIRlhjRnafyo/6MOEm5jHUktQ2Ap9htVPinioAX/EaynnPEOcp:2fLu4PNRf9aqo/6bEm5zWp9hv6AX/P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e0ce691947383087454ddd9563f0dcf_JaffaCakes118
Files
-
0e0ce691947383087454ddd9563f0dcf_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE