Behavioral task
behavioral1
Sample
0f365aa5f07283cd3835f4534d5d8540_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f365aa5f07283cd3835f4534d5d8540_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f365aa5f07283cd3835f4534d5d8540_JaffaCakes118
-
Size
41KB
-
MD5
0f365aa5f07283cd3835f4534d5d8540
-
SHA1
e2f67136dd5d062c984795869b39d1582f3fef2f
-
SHA256
0511943849241125ac46858965905dccad825cdf499a39fbca1191b230da8262
-
SHA512
d4b09056ae4caf1b78e9ef54673869219dc04ddcb14d01a4bfac765f7a6cebc8e4b083534c272b3fda63b1c03d23b17b7e1b1238f40f99e7b96cf5464d590c56
-
SSDEEP
768:YRDtz96VLbKi2AocO3+jeWykwm9AoKJYrjPIvbQwOEf3XX/Qxhl7FAjnl2dY1g:YlsbxocO3+qWykc0zGbpfHvQxX7FAjl9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f365aa5f07283cd3835f4534d5d8540_JaffaCakes118
Files
-
0f365aa5f07283cd3835f4534d5d8540_JaffaCakes118.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 35KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MEW Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ