Behavioral task
behavioral1
Sample
f0ef7bb52a93a69684be1ee0f6b746fd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0ef7bb52a93a69684be1ee0f6b746fd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f0ef7bb52a93a69684be1ee0f6b746fd_JaffaCakes118
-
Size
2.4MB
-
MD5
f0ef7bb52a93a69684be1ee0f6b746fd
-
SHA1
3c126fb80870baa24bf53abd28553b87a2fc3770
-
SHA256
87c57ca9f367de92e7d3d9be0a09766463e76415c5fcb1dee21760113b23ac0c
-
SHA512
5a8f03b9c46ee9a10954238f51c0b4b9abf20ceeb5da82ffdc3daa381880977c80ace2296de9ff1b556f887aeec9fa76644f6ae4b7294b45c9cecd39c7fee4c6
-
SSDEEP
49152:dOFj3o9byZnteaU3GyNHZyJ8yct0Q4P4M338dB2IBlGuuDVUsdxxjr:dG3o0tHUtN5y2tIgg3gnl/IVUs1jr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0ef7bb52a93a69684be1ee0f6b746fd_JaffaCakes118
Files
-
f0ef7bb52a93a69684be1ee0f6b746fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE