Behavioral task
behavioral1
Sample
f0a06f58ae3ea6560670599a9e9f8ca4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0a06f58ae3ea6560670599a9e9f8ca4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0a06f58ae3ea6560670599a9e9f8ca4_JaffaCakes118
-
Size
1.5MB
-
MD5
f0a06f58ae3ea6560670599a9e9f8ca4
-
SHA1
2f6923c9a475df080a6f34f8bc3169ebec46332c
-
SHA256
905311b711cc122c2621e0b6828ffb790244e0ccbd37e6d781e1356efecd1109
-
SHA512
22988eda072ef6123b9cf2209df2f7173231669abc756ff44317e9fb39df40ab07abe590ab286969e6201ca3b215d61b6a3476058ef1affe4c9de3766227ab0d
-
SSDEEP
24576:PqzuR4Vs4Q0Ns8Lg4lE0+6lxUEU4fbkjFaskW:l4dq0g4lFnvkj7k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0a06f58ae3ea6560670599a9e9f8ca4_JaffaCakes118
Files
-
f0a06f58ae3ea6560670599a9e9f8ca4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE