Behavioral task
behavioral1
Sample
0a56d954843cf6d2b9ff790f4a37b2a4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0a56d954843cf6d2b9ff790f4a37b2a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0a56d954843cf6d2b9ff790f4a37b2a4_JaffaCakes118
-
Size
43KB
-
MD5
0a56d954843cf6d2b9ff790f4a37b2a4
-
SHA1
51af6eab4b2bc469c0f715d1f227a3b2f2d3c2cd
-
SHA256
746bb0b9a98ee13b85c4b0be2bfcdd7a36cb8bc083eb9a799717a9f2c1ef7598
-
SHA512
a4eb86d589a354ac84eb1a3fc1b6603cbd71b4de2dbad0199ad69b8eaa0e90f0a23ec02173810c4359af496bbad60574b3a08810dc8e093f14416ef6494e0e75
-
SSDEEP
768:4hf644sfZEnu4AvYi5XeRRc+L31uaFoEUusDBRY2MAOLjpCoawQ:4Z0XuhjeRRc+omoQGrSDjy5
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a56d954843cf6d2b9ff790f4a37b2a4_JaffaCakes118
Files
-
0a56d954843cf6d2b9ff790f4a37b2a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE