Behavioral task
behavioral1
Sample
0effb381b53197bab8e7819619f7aa62_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0effb381b53197bab8e7819619f7aa62_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0effb381b53197bab8e7819619f7aa62_JaffaCakes118
-
Size
41KB
-
MD5
0effb381b53197bab8e7819619f7aa62
-
SHA1
1a87b9a3951e8a4bb7c72bf565686946ff58f498
-
SHA256
a95c2d0b3c8239733b0227591b92243f44ce50ffe0e90ff7fa7af1ba0b0d42de
-
SHA512
efac215484ec0a9d081091bf068e8ad354753dd39168eda814f241bce16923fd0a8635041e353a779c60b13729d68d3616370cd4185f949e2694be7f5365ef89
-
SSDEEP
768:lT7X56l4IU7F7DHZo19wcG0+1HETEpXh30FM1ia9QhG:lT7X56eIU7Ba19wqTG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0effb381b53197bab8e7819619f7aa62_JaffaCakes118
Files
-
0effb381b53197bab8e7819619f7aa62_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb48822d4f6af1d36a44f1d7f3aa3efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ