Behavioral task
behavioral1
Sample
f09f66b8fb36a6c5927796d1dc7670e1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f09f66b8fb36a6c5927796d1dc7670e1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f09f66b8fb36a6c5927796d1dc7670e1_JaffaCakes118
-
Size
10.6MB
-
MD5
f09f66b8fb36a6c5927796d1dc7670e1
-
SHA1
015ea6bc442242c6de7dafac5d4a3c7e42084fdd
-
SHA256
b003fb7f5f9c33572401a276a704a27bf27f76d4f4842acbd7724abe18e32dd6
-
SHA512
fb4f9fff1622d60ae3f2ec38af677982fadc83c73ef362350fb93935dafdeeeedc27eeabb724f938395688773cbcbbcce38864d65fd198cccdd4e4cd1326c664
-
SSDEEP
196608:09ZB8OLpT/sx3aUgDeZqT/sx3aUqAiuKo2T/sx3aUgDeZqT/sx3aUD:KZB8y1oBcoY84oBcoZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f09f66b8fb36a6c5927796d1dc7670e1_JaffaCakes118
Files
-
f09f66b8fb36a6c5927796d1dc7670e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE