Behavioral task
behavioral1
Sample
0c1505fcbd225fa0ef08bcd6123a1e6a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0c1505fcbd225fa0ef08bcd6123a1e6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c1505fcbd225fa0ef08bcd6123a1e6a_JaffaCakes118
-
Size
94KB
-
MD5
0c1505fcbd225fa0ef08bcd6123a1e6a
-
SHA1
020a54a20200190e14b764c1c0986a868f1c9672
-
SHA256
a7aa2b72415b7c228a2681f2ec9a9d1fd7d9986d5fa1f2c274f0a17627f04770
-
SHA512
0228d90bd1d25149f49740cfa6c34abedd963787c199a6368e69c81f400becac565e4c9aaa94bf1d3e05c96fcd69a9db58ea9db1735d9689e7daa294e27165f1
-
SSDEEP
1536:QyGSo8wU9iKLiaivl5Xh+52yiquafyrPjSAK9UUiEhq2EEcz/eX6L5/bcHvyHuiB:QyGB8wUUKd2Hg5hyafyrPOAK9xF36/ai
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1505fcbd225fa0ef08bcd6123a1e6a_JaffaCakes118
Files
-
0c1505fcbd225fa0ef08bcd6123a1e6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE