Behavioral task
behavioral1
Sample
f0f1a91b2827d4deba0c2d4d391c0dba_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f0f1a91b2827d4deba0c2d4d391c0dba_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0f1a91b2827d4deba0c2d4d391c0dba_JaffaCakes118
-
Size
133KB
-
MD5
f0f1a91b2827d4deba0c2d4d391c0dba
-
SHA1
6edd7a46160cfa5b550b66cd6f473db06a0976fc
-
SHA256
40f290b522f14665c26aca4e601de82cbe8946516f43bc2fafff23045743d501
-
SHA512
7b43a91c601cb498d0def42a29911a623170790a27750c7d214020e98513b78413382844dcd76756ced5d3fbda4a0952911db806b6139e8c5f55fa53a6c9459a
-
SSDEEP
3072:CmLQXmRLQrJbnTSZllpxcQhYRj44tnh+e5eavfEfAI1+fIQ:CwROJbT1QhY9gTavf0FIIQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0f1a91b2827d4deba0c2d4d391c0dba_JaffaCakes118
Files
-
f0f1a91b2827d4deba0c2d4d391c0dba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE