Behavioral task
behavioral1
Sample
b0feba3941d68a506a11d1a8a640681c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b0feba3941d68a506a11d1a8a640681c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0feba3941d68a506a11d1a8a640681c_JaffaCakes118
-
Size
4.2MB
-
MD5
b0feba3941d68a506a11d1a8a640681c
-
SHA1
c481f846d04d51bbc5e1bd5b29f3e30600b668dc
-
SHA256
c48765b4f99ba379654270a60a4942b490cb2eb5a060ac2e495e77728ec3b887
-
SHA512
5d6fb888589ffabcf3d3e1c5335791d2cc8f3d0e407beb18f81dab91977ed88dc90ffe54c87fa82c2febe6e0c2ebe1992e38b3d17ead36b4205c5fcec0f34e26
-
SSDEEP
98304:i0qh0r0q2wf02GzMwDws0q40q0qC0FwwRZHwNwYwx0qJ0nwQ0Z0q/Npww2ewl0qb:i7effIPEsy58doQaTxLhQyZbIly38do2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0feba3941d68a506a11d1a8a640681c_JaffaCakes118
Files
-
b0feba3941d68a506a11d1a8a640681c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE