Behavioral task
behavioral1
Sample
f0199da26371a6edfe095b4b62e9a031_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f0199da26371a6edfe095b4b62e9a031_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0199da26371a6edfe095b4b62e9a031_JaffaCakes118
-
Size
1.5MB
-
MD5
f0199da26371a6edfe095b4b62e9a031
-
SHA1
05c12026c16c3487379b77e47d2ae8ada29e03f1
-
SHA256
b531ae02ca4d5af7681e7382e2b7db6aed817542d1b93b71693c72c411283b04
-
SHA512
3d0d9e8f09795fe21a0877669b2c41d6bd3b6101257f2d3cbeb50f3a33358a6b8decadc256267c94e8fe4da66c4387ae640bfe9ef0b6de1982f0ce1856d66048
-
SSDEEP
24576:qMhb7eKADcvfiZA6uteHHjQBo2rPhGnMb/A4inpeREwGhrHW:q+b7OAhtejQz7hp//Wppvr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0199da26371a6edfe095b4b62e9a031_JaffaCakes118
Files
-
f0199da26371a6edfe095b4b62e9a031_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE