Behavioral task
behavioral1
Sample
0bf1f7844c818ed2fc181557d3351241_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bf1f7844c818ed2fc181557d3351241_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bf1f7844c818ed2fc181557d3351241_JaffaCakes118
-
Size
5KB
-
MD5
0bf1f7844c818ed2fc181557d3351241
-
SHA1
6b9b42d6f0e0f73d1ca454258c9e73b50ce9fac5
-
SHA256
9f334111c243bbcfea2e20535585e7fe7d4273c388d32d43b4ea5f4e78cd6677
-
SHA512
b017898aca83ba58ff7ef7186a0aabc6d1d85102c39531ba12b56b4bc97a19cb08a8ab9bf98bd4f8172a5e171b87c233001d0a81f294f5324300445b051d57ea
-
SSDEEP
96:e4jRqRVectmPUH42uXBV00Li3jiNPXj8rBVY5tvfBWAvem:e+qRsLWmxV0rTiC1VS3BWxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf1f7844c818ed2fc181557d3351241_JaffaCakes118
Files
-
0bf1f7844c818ed2fc181557d3351241_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE