Behavioral task
behavioral1
Sample
f1033c22b6e209df51a5f3cca54b798a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1033c22b6e209df51a5f3cca54b798a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1033c22b6e209df51a5f3cca54b798a_JaffaCakes118
-
Size
133KB
-
MD5
f1033c22b6e209df51a5f3cca54b798a
-
SHA1
2945dc615c69d09030c1ff72db54295b6ad9eba3
-
SHA256
6c6ee93e77a0adbca9dc53b6dcb7f47ab540ea7ce53d20ec9aa3dfc01f3e62e5
-
SHA512
aa09edc4a74a7094866b67004dbea2664aa64ee58534409fa406c2f0135016da25a30e72ee1e4048b6d17ac35a54f9e6c5fbfdd8532048391ce2632481e0d765
-
SSDEEP
3072:6x8R+OkYPNuL28yVEfFPXEC/TX/lPiBcRju72jYD9YHlsoGjn0AQHziZk9nODQ:E++oP40VaGe52qGWs9jn/QHziZynODQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1033c22b6e209df51a5f3cca54b798a_JaffaCakes118
Files
-
f1033c22b6e209df51a5f3cca54b798a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE