Behavioral task
behavioral1
Sample
0ef40323be448eebc215a7967f51e3d8_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ef40323be448eebc215a7967f51e3d8_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ef40323be448eebc215a7967f51e3d8_JaffaCakes118
-
Size
384KB
-
MD5
0ef40323be448eebc215a7967f51e3d8
-
SHA1
1a0e1fd68fcb491ca3bb27950fe383f7b48e7b51
-
SHA256
d3496783d391ce3c7558f70a7cfbb119cd57fb27022d62008d3d403b4c998824
-
SHA512
f45f1ae0bd480d08dd656b8cbf6a2dd3624439a81f400c5c70b7bba77ac5e3f77143b520e3f404811310a2b70d19b507a90df9bb7c09b23770acc65b7ce6e7d4
-
SSDEEP
12288:xMm+m65MXsAGBLUc2k+CR/ryigQ8+KJAeF:2B55McAUf2igQ1WAeF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef40323be448eebc215a7967f51e3d8_JaffaCakes118
Files
-
0ef40323be448eebc215a7967f51e3d8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE