Behavioral task
behavioral1
Sample
0ad1cc9bfb8b6a53c0324b41ea14fb2d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ad1cc9bfb8b6a53c0324b41ea14fb2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ad1cc9bfb8b6a53c0324b41ea14fb2d_JaffaCakes118
-
Size
13KB
-
MD5
0ad1cc9bfb8b6a53c0324b41ea14fb2d
-
SHA1
cafe1530720f83ac28b569f52a0f23ce3603d1b2
-
SHA256
add815feea73595172e6173844ffe6976b3add2519ae12a01ee9e4f18e544e98
-
SHA512
720c0144a850ac373e3bce3f877196a38bc57ad9f90b2a8cbde910c0084120b16148978499b00bb09313de5ee73bfff3cd9584652f673a97a6b9b14122359966
-
SSDEEP
192:rNXK4y+1mDNmZD9yDf+OyKc4GVvt6sDVmzhnt3KgNI///dIm849DpssOf35xU5im:9y+c0ZOfhCt6wVq3KgNI3WU9NNd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad1cc9bfb8b6a53c0324b41ea14fb2d_JaffaCakes118
Files
-
0ad1cc9bfb8b6a53c0324b41ea14fb2d_JaffaCakes118.exe windows:8 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE