Behavioral task
behavioral1
Sample
00ef2296d967c82511b751629eded904_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00ef2296d967c82511b751629eded904_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
00ef2296d967c82511b751629eded904_JaffaCakes118
-
Size
102KB
-
MD5
00ef2296d967c82511b751629eded904
-
SHA1
6ffe03cb1bf4bb6052a2e5836f4ab0c2ac56d87f
-
SHA256
0238a932f3aa9abf3034b69743478b81a6a83b711d77050282266ca2da75f311
-
SHA512
05cdabf225d6c267ec59a8ad1488b5a79b2970c86bf5583b47d7f12c5eddb9a1b7c8f3911d2c3a33b9ff3920008dd6f9ffafe7c5eb70374cf9ae8e700755c780
-
SSDEEP
1536:6lZ6slCeeRTJEjZk+DV9RuLhsSlDJU+JOJD3Qvxhmg/iFJZNbmMY:GVlJ1j6+DALhLlFU+IJEhmg/qHAMY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00ef2296d967c82511b751629eded904_JaffaCakes118
Files
-
00ef2296d967c82511b751629eded904_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE