Behavioral task
behavioral1
Sample
0ef43ff496f825dc55f5c2f00ed22e51_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ef43ff496f825dc55f5c2f00ed22e51_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ef43ff496f825dc55f5c2f00ed22e51_JaffaCakes118
-
Size
179KB
-
MD5
0ef43ff496f825dc55f5c2f00ed22e51
-
SHA1
83367bf9d6468344b4c396b0ff756241ff7c1df1
-
SHA256
ceebde5fdcff732a2c6794704edf449da893f3144b6c9a1a5582f95588d2e8c2
-
SHA512
983d5682b89d946a6ddbcec9937099d99b860d27d6d87e6afa274d2ea414a7aab053f38c0a3b4b791c418505f5c47e7ce57cda4736893f8257fd2132de558817
-
SSDEEP
1536:JDtqk7+mBTRETRFnCnU6GOVkfIA1SyYLRsdmJXXiqNk+85+83v8M:JpRxB2HCnU6+1SyZOiqH8M8f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef43ff496f825dc55f5c2f00ed22e51_JaffaCakes118
Files
-
0ef43ff496f825dc55f5c2f00ed22e51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE