Behavioral task
behavioral1
Sample
0f11a6e718664698872fdd06556a939b_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0f11a6e718664698872fdd06556a939b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0f11a6e718664698872fdd06556a939b_JaffaCakes118
-
Size
97KB
-
MD5
0f11a6e718664698872fdd06556a939b
-
SHA1
7135c18fe6c1589e0088bc6dc26ca6445009881f
-
SHA256
73cb5e7bd83f0678a777078ca8356b1377ff02c396efb1f7387dff0f13298a7a
-
SHA512
4ce15109888e24234ef79c8ec563255b885c4d9e66ff614b8b5696884b549d845d2081e1c6be850053b96382bbc5bc21257493e804ee132db15801c717f458af
-
SSDEEP
3072:R5CnPVz0JZEUt7fCYtRaBgm6DNDE8UCiWJ:40HFt1tRVNQ8UCiWJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f11a6e718664698872fdd06556a939b_JaffaCakes118
Files
-
0f11a6e718664698872fdd06556a939b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE