Behavioral task
behavioral1
Sample
0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118
-
Size
89KB
-
MD5
0d78ac5b9781c5c8e45e604adb6aad53
-
SHA1
ce9e7a628019a5fb59787515968824c39559d58f
-
SHA256
a866ece54a8608394d8019d4786ad943f3f42a0685c4dc7b085621bb8d8c1f98
-
SHA512
3b712bf801b42427c5f3524259dcbbc7c9a2ed6bc87fa1af35347c8feda2df92a4cd2d8e4f60fb2eaa8b77d650e46fc0c0b115ddb07886d1b7ee7555a01cbb78
-
SSDEEP
1536:6mi+xxdgF45E4h2Hnq8OFnouy8CBZVDYTwtaRdoYVJ42PD08sLBvD6:6mi+/dgy5Ef8doutaZZYCajVJ4KgvD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118
Files
-
0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE