Behavioral task
behavioral1
Sample
f0322d311aa71d2ea745e2844ae5526f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0322d311aa71d2ea745e2844ae5526f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0322d311aa71d2ea745e2844ae5526f_JaffaCakes118
-
Size
2.0MB
-
MD5
f0322d311aa71d2ea745e2844ae5526f
-
SHA1
3ccf1bde79d8e873138ebfa4f26049aa8361040f
-
SHA256
77d5e0d30103a9373a5eddea652bbed7262c961bc2e474202b40fc19d5a0d222
-
SHA512
d9ab3c1ab93ef14b0ce8862f8d2be051788dc474c6997a0a26e1ffd3652581da3a09fd3d8deb22f7ec28bde9a0f8d61a6d4e4b4085a9a75add134808eeacbdde
-
SSDEEP
49152:KhzKb0fxIxgeGaWWGQ7ai7D3xTgOxYwpK+FH6AjNbOfkA8hSGQ7ai7D3xTgOxYw0:KVKbM2ieG4D2i7D3xkOxYwpK+wAjNbO0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0322d311aa71d2ea745e2844ae5526f_JaffaCakes118
Files
-
f0322d311aa71d2ea745e2844ae5526f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE