Behavioral task
behavioral1
Sample
0f8404e56073f7045e7e8429abc132e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f8404e56073f7045e7e8429abc132e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f8404e56073f7045e7e8429abc132e5_JaffaCakes118
-
Size
75KB
-
MD5
0f8404e56073f7045e7e8429abc132e5
-
SHA1
e2f7ca0649dbfdbde1724eb166ce1cd27fc4c7bf
-
SHA256
a6d275d3c206ab17a76c8d70269c0c9979c16a222571e46dfb2d379d41534737
-
SHA512
ad93fc918be19e0a75e585a2fb0af9e20eb6bc6d455ce555630797a2be97db457c093cee97a9bb44f31a18ff278a7685ce42b8fa1f7500d30608d339d4aa3cd6
-
SSDEEP
1536:+JofxvwTuOnabuwybk6gDG6tHFjo9GhV58LpjrZJwPIU7nouy8dMJ:YKICAab1yY6Z6tl3j5wrDCIUjoutdMJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8404e56073f7045e7e8429abc132e5_JaffaCakes118
Files
-
0f8404e56073f7045e7e8429abc132e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE