Behavioral task
behavioral1
Sample
f0dfebc76bf6ef8a7e7dfbd28825cf06_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0dfebc76bf6ef8a7e7dfbd28825cf06_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0dfebc76bf6ef8a7e7dfbd28825cf06_JaffaCakes118
-
Size
2.9MB
-
MD5
f0dfebc76bf6ef8a7e7dfbd28825cf06
-
SHA1
eba009f4d85e3d6eb3c9642f671114ff63d6f186
-
SHA256
9e514c90da2fd25b92bc7fdbfb6798665e36e163c8606f25eac8ae49a0b9c797
-
SHA512
c3171628a40bdfea72737f68748b90055f98178a9e66e26628af3e832a3ddce29f9ffcc1f48650684f0e502dcf839123faa6259bfe720cf71424b3ad01a171bb
-
SSDEEP
49152:i0i42X7Bm3+x7eNO9VVjTtIWCUWCBIjmzlOMDHRlWl2mc8tEBuk:IZ7B++deN6TtNCHCBUm5XDH2ox8tkuk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0dfebc76bf6ef8a7e7dfbd28825cf06_JaffaCakes118
Files
-
f0dfebc76bf6ef8a7e7dfbd28825cf06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE