Behavioral task
behavioral1
Sample
0bf52e9611bceee357ea625ab15779d7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0bf52e9611bceee357ea625ab15779d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0bf52e9611bceee357ea625ab15779d7_JaffaCakes118
-
Size
5KB
-
MD5
0bf52e9611bceee357ea625ab15779d7
-
SHA1
c2301e5f107376a550f03cef90fa69b49ab079f6
-
SHA256
7a95e6c9ad5f1c8230ffc06c68ee0101db93bf2e0e88f02bd66b104d276bb02b
-
SHA512
369c13a6f76b966a9c085ee5bccbc3eb6ddd7caf2d3c3c9363f19e193e0f02247036eb49d37822005e4dd9ec29c3260ba72b1ed010f9dd233d53826811fff74b
-
SSDEEP
96:86zsi8EbuAMo4tBf3DGBpwlDJYJ5JG2ZJa17xHzELYjyjZ5j5w:3sfEbBMo4thDKpgJYJvTaENt5j5w
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf52e9611bceee357ea625ab15779d7_JaffaCakes118
Files
-
0bf52e9611bceee357ea625ab15779d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE