Behavioral task
behavioral1
Sample
0f44e4acf4d64e1057402daa724c4603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0f44e4acf4d64e1057402daa724c4603_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f44e4acf4d64e1057402daa724c4603_JaffaCakes118
-
Size
205KB
-
MD5
0f44e4acf4d64e1057402daa724c4603
-
SHA1
f0699b707339f6ffb30988e0ab173831b5d9ffb5
-
SHA256
ac55f30f471e3232ce4d487e71cd080b1241a50c2936a77c980c5dd5b1682c11
-
SHA512
f122995d2ddf936e6e702373dcf8592b52facabacb2697c92edd6c5b43d183486fcf90fc599b9a37d5cf53810958ebac5cfaed9b8941b1b62ffc9e9b69962fea
-
SSDEEP
3072:OJ2dKtep36rPQ0uW537SdVqUFwrAdJoOAql81W6r8ShjhVYDmRm:OJeTqtuW5rSHqGwGyOrlgPR5hKqRm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f44e4acf4d64e1057402daa724c4603_JaffaCakes118
Files
-
0f44e4acf4d64e1057402daa724c4603_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE