Behavioral task
behavioral1
Sample
0ebca6f649661f5c288b33ecd0e60c04_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ebca6f649661f5c288b33ecd0e60c04_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ebca6f649661f5c288b33ecd0e60c04_JaffaCakes118
-
Size
2.5MB
-
MD5
0ebca6f649661f5c288b33ecd0e60c04
-
SHA1
7c5985942d6b5b40fe128f2adb7a2ca9ead9636d
-
SHA256
d000f5fcc336539de6865b45abff2656e1dc30a6340f19008182fe5edd3309f7
-
SHA512
6689c1b777f27a4a34b65a06d5c80d83ad8b17bcf5f886c0737fb499952ffaacfd818c9d20e1f43a044dd63b2d68409e44473ecf96afa5d7dc192a93788fc271
-
SSDEEP
1536:02dFZ8u2S0MB1QpvZOrgErjLRpI4is+e3gfRhP0fNSDatQzwmPMiX70/0:02dFZc8CZOrgf4iYg4fAaWvUiX7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebca6f649661f5c288b33ecd0e60c04_JaffaCakes118
Files
-
0ebca6f649661f5c288b33ecd0e60c04_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE