Behavioral task
behavioral1
Sample
c0ee971425707e29e576b7b869e473a0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0ee971425707e29e576b7b869e473a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0ee971425707e29e576b7b869e473a0_JaffaCakes118
-
Size
11KB
-
MD5
c0ee971425707e29e576b7b869e473a0
-
SHA1
87d3ac53209cf3828317507c0c314d9937a7e144
-
SHA256
d596af106fe702db091071752100a421122d5a112eb4b790b7fd49d174b47a23
-
SHA512
7a256588bc6da9b742bf2d732d4be293bb4d87417b953d39bf1b3e90aab818fd87724909311cfc6953c81ae3bbbefea65b7decdc0682bca208a2f4819303b91b
-
SSDEEP
192:hxGTGrTmULbu/6Ix1sWtnfS/qj6cA9IMzINP/8GzEafhZOoEgIfPBpSi8DrPFaJ:vGYmQbur1Btnqqj6cA9DzSP/8lyNcZKi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0ee971425707e29e576b7b869e473a0_JaffaCakes118
Files
-
c0ee971425707e29e576b7b869e473a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE