Behavioral task
behavioral1
Sample
f0c33d67fbf1ac879cbfbb5da91d6743_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0c33d67fbf1ac879cbfbb5da91d6743_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0c33d67fbf1ac879cbfbb5da91d6743_JaffaCakes118
-
Size
10.6MB
-
MD5
f0c33d67fbf1ac879cbfbb5da91d6743
-
SHA1
f6468bea3e321d588d48a02403a7c8d63ec45b3b
-
SHA256
3f3a2e7e9ce7340a200038c37867f7b3379c7c57823e855219d5f8fc28e1e308
-
SHA512
239314004f61633a13aebd994f2d40269c3dd27939a6fe47c5ef41e3efccb79ff4a158d2ff50d4b3af15b329d2a3e3cfa997a2d54f1099bebdce20e1c7481db4
-
SSDEEP
196608:eb1L0pC/WY64VkaXV0SY64VCauEkHxkY64VkaXV0SY64VD:Y1AkNuAUuECxzuAUl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c33d67fbf1ac879cbfbb5da91d6743_JaffaCakes118
Files
-
f0c33d67fbf1ac879cbfbb5da91d6743_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE