Behavioral task
behavioral1
Sample
a0f4275f5caa6b8d3982697e4ba1396d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0f4275f5caa6b8d3982697e4ba1396d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0f4275f5caa6b8d3982697e4ba1396d_JaffaCakes118
-
Size
174KB
-
MD5
a0f4275f5caa6b8d3982697e4ba1396d
-
SHA1
20b945c95ec4c2db75c4ac2281e94ffddfccd720
-
SHA256
c639e1efe1495e7a1b77283b110b33e421d1d6e944be135abb2e71d1037999d9
-
SHA512
972660f506c81f4dfa32f16add2946b7d1dc91a23076d8c1838106fb3cb034a64425de14c8ab9e3915e54aaa66a334e1047002ccf2e763b1b4b54f27ab83ff15
-
SSDEEP
1536:lv/FGZhL97uJ3AdPBz2pQ/bVyxxu0/g03LFz8K/Gna+WCybpmH+MhCiPW:lvcXLx5Bzqcyxx7/gipQ8Ga7ue2PW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0f4275f5caa6b8d3982697e4ba1396d_JaffaCakes118
Files
-
a0f4275f5caa6b8d3982697e4ba1396d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE