Behavioral task
behavioral1
Sample
c0e7e16ff3ebb959fa3d64f55a458ca6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0e7e16ff3ebb959fa3d64f55a458ca6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0e7e16ff3ebb959fa3d64f55a458ca6_JaffaCakes118
-
Size
137KB
-
MD5
c0e7e16ff3ebb959fa3d64f55a458ca6
-
SHA1
89192dbef661d2b03a9c76cf57340db5c14a97b8
-
SHA256
1aaa78fd0dc07b1e672218b075ba95c3393b65634fca51abed8da08195f49b5f
-
SHA512
df5d963f93cd3a1d960f93b9a155b78bf92f6384a5ff11ca8cf1e8c3a3e5059d0ac80a8a4fe98661222d84a8e55f8787ea927b7a51149ea75fb507aa0786ba7e
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WR:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0e7e16ff3ebb959fa3d64f55a458ca6_JaffaCakes118
Files
-
c0e7e16ff3ebb959fa3d64f55a458ca6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE