Behavioral task
behavioral1
Sample
0f5599a7c46d821acb59e9e1dd87c182_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f5599a7c46d821acb59e9e1dd87c182_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f5599a7c46d821acb59e9e1dd87c182_JaffaCakes118
-
Size
323KB
-
MD5
0f5599a7c46d821acb59e9e1dd87c182
-
SHA1
c6244ea99b080bcce2d011077bcd5adeba0b525d
-
SHA256
3e5339dca2a58232491180275dec8e133e1a83a4471a4f3b2fba9ea3626c7d60
-
SHA512
37577750f9d86094eb1e24845753f52a98e5730bc2b5277c3c16531ff5aa7b321e9bd3877294aaa043b52a9d2b44129c47d08ab7ca0fb99040d4ce57e1b1c6e4
-
SSDEEP
1536:byOOAd0rq4+RS5rkJ+SRDonnN87DpaMtq1ha8lKz9NayvJ5tYjyR+CDqR1OUWddu:byW4+3lhD945UtYjyjtLDnRyUc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5599a7c46d821acb59e9e1dd87c182_JaffaCakes118
Files
-
0f5599a7c46d821acb59e9e1dd87c182_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE