Behavioral task
behavioral1
Sample
0c946f30c6c8cf054dbdc2d14c8d24fc_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0c946f30c6c8cf054dbdc2d14c8d24fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c946f30c6c8cf054dbdc2d14c8d24fc_JaffaCakes118
-
Size
6KB
-
MD5
0c946f30c6c8cf054dbdc2d14c8d24fc
-
SHA1
229b5d1ca28cced5670f718e126302216c4fbcd2
-
SHA256
9f3c851ddd13e0e082cca4afbcafee956cf1a330658e08562b11957cf0f97ef8
-
SHA512
6376a549e314c3ce1d4035a99b006efa28933b6e443e9dd1659223c49a77b9b0618fd7bf60062709a7c9335ddcc98504181f7c6b27a3855f60d1152f3b87cb75
-
SSDEEP
192:nRjcV5ZDPPgYEGY0dKvkYwGiVat3/gUt6W0ICk:RjcV3TEGY5vkYwnVC7tNCk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c946f30c6c8cf054dbdc2d14c8d24fc_JaffaCakes118
Files
-
0c946f30c6c8cf054dbdc2d14c8d24fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE