Behavioral task
behavioral1
Sample
0ebd2e0f60c3b46e5dbb0b208c13a90b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ebd2e0f60c3b46e5dbb0b208c13a90b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ebd2e0f60c3b46e5dbb0b208c13a90b_JaffaCakes118
-
Size
5KB
-
MD5
0ebd2e0f60c3b46e5dbb0b208c13a90b
-
SHA1
6ea61613623f7964a9d78b59e5fb8ff47516bf07
-
SHA256
6188fc185d6e92749e136f6189a6e07106a47b4fd575deeb0b9522a415fad107
-
SHA512
a6a0e680b757891a92bcade5ef8324c339133c5b9ea3aa41dd43aeb3c611b2b5befc0c286735776e4083c1daeba99e739f42c04908edb6043f531882e5133170
-
SSDEEP
96:sJ+pHoGhOoPwozPEM+P2SzxaMRgjNEPWpiu1L/3A9MTD2Getd601AEqR+Bksce:sJeDfwoYP26AfjiWMux3zqHdAsmFe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebd2e0f60c3b46e5dbb0b208c13a90b_JaffaCakes118
Files
-
0ebd2e0f60c3b46e5dbb0b208c13a90b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE