Behavioral task
behavioral1
Sample
0d5749e002230c950b97610109ab57af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d5749e002230c950b97610109ab57af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d5749e002230c950b97610109ab57af_JaffaCakes118
-
Size
5KB
-
MD5
0d5749e002230c950b97610109ab57af
-
SHA1
b64aa46a477f02c23c7056fe5038d842a63b2ea8
-
SHA256
b80d3ed7bc52f00c420347d5e0bd823cfe34bed03681a329ef1270e05a298912
-
SHA512
fa44df1609fff884707bd2ec8348def7279b4b419abb862b3f66fb289f319dd063698f39c45bb02c093f797fa7b1aa90130ccb455fa9e42151354d15f31b5c15
-
SSDEEP
96:iEBVAomTesO0fLP+jZXY0W53c1UILKGfW9Y4MEs1R//nnSB0mpOymwYD:jVJeesOcCjpYbDILKWW8RyBPshwYD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d5749e002230c950b97610109ab57af_JaffaCakes118
Files
-
0d5749e002230c950b97610109ab57af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE