Behavioral task
behavioral1
Sample
0e4b3dcb85bfdf2259209c376b958f0e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e4b3dcb85bfdf2259209c376b958f0e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e4b3dcb85bfdf2259209c376b958f0e_JaffaCakes118
-
Size
470KB
-
MD5
0e4b3dcb85bfdf2259209c376b958f0e
-
SHA1
13cf893396377fb5fe31adbc1e0d4f71f4727ad6
-
SHA256
a489ea3d2e232a48bd81f2f6f35b4589ba59b0279ae98f182300d35095e460ba
-
SHA512
7c52375c62364f8344c6bd1cbf7de3e9c50c8cf8cfd1b1258d92d4d90323b070a4885f7783f5f2778d0abc4d5127d65d10376d2f823626ed39a667ef7d1ee85e
-
SSDEEP
6144:xep8Rmxx4oKHqu8SvoiKbHFe1kiYLvXmT7ORbSjqqUOAr:xepKmslESAiUTLvXmT7ORiUOA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e4b3dcb85bfdf2259209c376b958f0e_JaffaCakes118
Files
-
0e4b3dcb85bfdf2259209c376b958f0e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE