Behavioral task
behavioral1
Sample
0eb8d98ef9b8dd7e54ba112b2663de44_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0eb8d98ef9b8dd7e54ba112b2663de44_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0eb8d98ef9b8dd7e54ba112b2663de44_JaffaCakes118
-
Size
135KB
-
MD5
0eb8d98ef9b8dd7e54ba112b2663de44
-
SHA1
ce2804a27e6e0b99d25330cce5ce6fcd6bec6301
-
SHA256
d83d81020ab10fcba04293117578b15796891d5618a08cd9a9ae01bda70b922d
-
SHA512
bff0299eab00ac73ad8a58a83f25922d9dea16e2011cdc2e5585d4123d5fdfe0e83558eea0abd1f1ae4b0891efe3c9f30c8d5dfd67bd50cc9fed70f1ecb0cb1c
-
SSDEEP
1536:VXUq5TXHN9l0jZZ8zjQqBbI2SbyGTJnUpgGDBOfIj:VXx5TZ/bxGTJnUpgGFOfIj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb8d98ef9b8dd7e54ba112b2663de44_JaffaCakes118
Files
-
0eb8d98ef9b8dd7e54ba112b2663de44_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE