Behavioral task
behavioral1
Sample
0fffa7b85dffa40986c348dc8a2c579c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fffa7b85dffa40986c348dc8a2c579c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0fffa7b85dffa40986c348dc8a2c579c_JaffaCakes118
-
Size
109KB
-
MD5
0fffa7b85dffa40986c348dc8a2c579c
-
SHA1
04e8f1e6e28dd5d8c120b3dfeb412c8bca21bce1
-
SHA256
9c76375f44513630e7037cc89c31cd61819a56e70a9995c9e28b793521fdec6b
-
SHA512
1c1515ea1f2f43936b23828e5dbecbbb813ed7b4fa76c99466d6dba8065c5c686f6ad98cba8655e7e47ede14016d856d15ca4ef73d1f0cd8aa171eba90862a10
-
SSDEEP
3072:aVGyf8HWFrJIEnRKvIHHw9ie9qaPPGOCc9n880LitC1:aVGtHWF1DSw+nqamOh9nA51
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fffa7b85dffa40986c348dc8a2c579c_JaffaCakes118
Files
-
0fffa7b85dffa40986c348dc8a2c579c_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE