Behavioral task
behavioral1
Sample
0dbb1dc0666d6e4218204f4b0d26df00_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dbb1dc0666d6e4218204f4b0d26df00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0dbb1dc0666d6e4218204f4b0d26df00_JaffaCakes118
-
Size
552KB
-
MD5
0dbb1dc0666d6e4218204f4b0d26df00
-
SHA1
678d426d9167020aed91ff33ee14e0c1ee0d1fb4
-
SHA256
ebf34da9c646b180c773d6238246cef246f7b332d14936bc2ee7fec49c79552d
-
SHA512
5a0ed678a0ad75b58bff3fe3518acf5affd9440adaa8d7ac60335e26cac4177c6f8aa96ade359f00f4ec39f09b244c6b4b424e1d4455a6c82330dad21e5daada
-
SSDEEP
6144:Lxd0r+zwr2rNy8daL6ku/GWSHaXCMMN+3rhmBF9Z9wBjuR41Sk9+HddOVX9xxBnE:ddHsr2rNv6aGTSIF9YUR4I3mVXQ37
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dbb1dc0666d6e4218204f4b0d26df00_JaffaCakes118
Files
-
0dbb1dc0666d6e4218204f4b0d26df00_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 231KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE