Behavioral task
behavioral1
Sample
0ef1bac466b21373dbd055ce94ebafa2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef1bac466b21373dbd055ce94ebafa2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ef1bac466b21373dbd055ce94ebafa2_JaffaCakes118
-
Size
30KB
-
MD5
0ef1bac466b21373dbd055ce94ebafa2
-
SHA1
1a298297e547b0d1952d4e6bb7ddb9bae984f0ca
-
SHA256
6337802efd552d9a6719f8b5b91f99352bb70d2a2f3d7b79a07c7fed0c598690
-
SHA512
1cb5b7dce41634bf29215bea3972b481400419153ad5c290e9c0188d1f8ab83443d4b1b10167ca7f56ab1a4abfd438ae4aebd234ff3de0bcf5f7b4c55da8dc1f
-
SSDEEP
768:xBaOEFovnn+AN7HuzOWhAIArSZmwo/BKqVfiDKh9xakoWs:3bFuzNmSZvo/xVqK77s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef1bac466b21373dbd055ce94ebafa2_JaffaCakes118
Files
-
0ef1bac466b21373dbd055ce94ebafa2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 527KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE