Behavioral task
behavioral1
Sample
f2112fbd509bf57d91aa6e9f7f907657_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2112fbd509bf57d91aa6e9f7f907657_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2112fbd509bf57d91aa6e9f7f907657_JaffaCakes118
-
Size
200KB
-
MD5
f2112fbd509bf57d91aa6e9f7f907657
-
SHA1
915dd14a9b8ab5ba3fee8586402c2c1df291917f
-
SHA256
e8414d8c966e723e72204034cb5108d2c4e7f50dd75abab1ebdf6b3f1d449147
-
SHA512
37a768c3da85ab93d83ee912333213fc81857e9df757be0931a4596bafb8209b7e7912172d5ef1590a2946d190c377715db06508327e6352b2f856569679be00
-
SSDEEP
6144:iUw6ukQBT3SefE8iAcjq1qenOkllE31bEd:Hw6t03SwEwcZePE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2112fbd509bf57d91aa6e9f7f907657_JaffaCakes118
Files
-
f2112fbd509bf57d91aa6e9f7f907657_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE