Behavioral task
behavioral1
Sample
cbe8e3c34f68c2f15173d8fbc670a4ea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbe8e3c34f68c2f15173d8fbc670a4ea_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
cbe8e3c34f68c2f15173d8fbc670a4ea_JaffaCakes118
-
Size
133KB
-
MD5
cbe8e3c34f68c2f15173d8fbc670a4ea
-
SHA1
87758313cc73e1695d107df9d8e3bbe3d92034b2
-
SHA256
3d96b654b2c90951b96060eab0768c89fe78764abd8329ae6314e86648d2e870
-
SHA512
3e2d2f5e284f2425c88d7519f8c9fa2f2febba95dfa4521a1607d03069cad2a4259fe00ad9e9c6f81e1620fb85c31cca1e945a2f182bdc3528fce4455a30a689
-
SSDEEP
3072:PswDiMFyAlSvoteVr3dSqcxEX5FMmlV8gPRBW0CgAQ:PsOBy/epEX3MezPRB9CgAQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbe8e3c34f68c2f15173d8fbc670a4ea_JaffaCakes118
Files
-
cbe8e3c34f68c2f15173d8fbc670a4ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE