Behavioral task
behavioral1
Sample
0ee243ff9f5cdd9591c95124c56c76e6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ee243ff9f5cdd9591c95124c56c76e6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ee243ff9f5cdd9591c95124c56c76e6_JaffaCakes118
-
Size
262KB
-
MD5
0ee243ff9f5cdd9591c95124c56c76e6
-
SHA1
c004111aa32e2015cf783005132b910ec70bcf35
-
SHA256
3cf6b0433847ee1d746d064e968e11b1b00e3e83fcd2d185ee0e5d9f88711eca
-
SHA512
0bb4d282762bd49c0322ba7ec75826d0b15357b90b6aba8d30d9cc04faffa8b52c6ed3098a7dbe7010d5624485054819582a4154de08e69944ccf67d4028c327
-
SSDEEP
6144:YurpcmTzm7CBK4+OTHJtLHsYAy11MqyUhVoItLNzGzrXyLX+I:YurpcmTzm7CBK4+OzJtLrAZUhVoItKru
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee243ff9f5cdd9591c95124c56c76e6_JaffaCakes118
Files
-
0ee243ff9f5cdd9591c95124c56c76e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE