Behavioral task
behavioral1
Sample
0ee7758b95e0f004d125c82a040cd515_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ee7758b95e0f004d125c82a040cd515_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ee7758b95e0f004d125c82a040cd515_JaffaCakes118
-
Size
763KB
-
MD5
0ee7758b95e0f004d125c82a040cd515
-
SHA1
bb4aea8b8bb276c92cb0b301efc0986d6d6249f1
-
SHA256
b916c51d243e8a75b2ee965672ed0830adf6e4558d25f8bfcd59de51c127ece6
-
SHA512
1c9f7fc95c98664e1008636c27b0ea85af670719c2cf9a2fee2807c67490314d4b437e1302f4dedc0169058bf27ed4094acf14ada6de1946e33bef8c52158147
-
SSDEEP
6144:GWZfec9EbXDk6RkQKm/UOPSe570Szp3b/UOPSe570Szp37/UOPSe570Szp3wuwX8:3ZWtI6RkfOB0vOB07OB0WYiZKTKwauH8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ee7758b95e0f004d125c82a040cd515_JaffaCakes118
Files
-
0ee7758b95e0f004d125c82a040cd515_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE