Behavioral task
behavioral1
Sample
c0c246bbd3dca60d7715d518fafc1000_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0c246bbd3dca60d7715d518fafc1000_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0c246bbd3dca60d7715d518fafc1000_JaffaCakes118
-
Size
4.0MB
-
MD5
c0c246bbd3dca60d7715d518fafc1000
-
SHA1
6f4083cf9c0ac47c209e91074588526ecdf66042
-
SHA256
b80736bb81672bfc38ee22d879d27db31c565c076ac872df59a389ea5a0d2e40
-
SHA512
06112f7e59565d3f4b83d2de3fd49821966f82c02459b6ed26fdf3dabb1fe4fb6e877e51da8a66a5f09060af5a69aa8542af44e0f34434a49d044f44ae9f3383
-
SSDEEP
24576:3uhaPOieZJ8NI80OieZJ8NI87BOieZJ8NI80OieZJ8NI871OieZJ8NI80OieZJ8l:Yb8t808t848t848t848t848t8kx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0c246bbd3dca60d7715d518fafc1000_JaffaCakes118
Files
-
c0c246bbd3dca60d7715d518fafc1000_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE