Behavioral task
behavioral1
Sample
0881da479dacadd79cd88edc3c8c4130_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0881da479dacadd79cd88edc3c8c4130_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0881da479dacadd79cd88edc3c8c4130_JaffaCakes118
-
Size
63KB
-
MD5
0881da479dacadd79cd88edc3c8c4130
-
SHA1
d1cbe55c8ffda9f973512ac3e5aa325cf986a272
-
SHA256
7c47f718310ebd3cc1b89c449160ccd0046c34d402fa848023fb4491ab6429df
-
SHA512
e12fa305023cb65e80bd6b69d3dbd13f5e4b10023b788ce1fecd42747a0dfc2261b9d210c87b467f4c002a0c4df4eb6ef4271a202a7fdb856b9360fc80a97077
-
SSDEEP
1536:fuX9t1c9CzI9MWHSIPbGEfbS9xxzdUM+pVtEv5wEN:uXs9MWHSxhR+0jN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0881da479dacadd79cd88edc3c8c4130_JaffaCakes118
Files
-
0881da479dacadd79cd88edc3c8c4130_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE