Behavioral task
behavioral1
Sample
0f8950430d18420daf07c8bc222b137a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f8950430d18420daf07c8bc222b137a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0f8950430d18420daf07c8bc222b137a_JaffaCakes118
-
Size
8KB
-
MD5
0f8950430d18420daf07c8bc222b137a
-
SHA1
14f08116bcbf9ea2cdc56d5fef3f506ec10f7cae
-
SHA256
f5dfe05e3fd57eef4444a211109ccad70024ba8d48dbafca9327dccd37d4f348
-
SHA512
c4b93541cd91b2acb2441037f9862807772edfb1535e5ffb0654d4be61712ac88f14f4b68bfb1a2fdd854f5fd8ebde073464f89bca43a4c6d6c66224a20cba6b
-
SSDEEP
192:nZVI0yXPSWmDbaQkOC0cTOrQ/gZ4DRvM9:ZvyXPSWmDeQkO7carCDRM9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8950430d18420daf07c8bc222b137a_JaffaCakes118
Files
-
0f8950430d18420daf07c8bc222b137a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 620KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 406KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE