Behavioral task
behavioral1
Sample
f150c26af615724bd5c4d536b09233e0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f150c26af615724bd5c4d536b09233e0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f150c26af615724bd5c4d536b09233e0_JaffaCakes118
-
Size
133KB
-
MD5
f150c26af615724bd5c4d536b09233e0
-
SHA1
dc3463bc4663e596d725112cfb6efd003995c461
-
SHA256
7bcd79f867130905457d0029883d439809c91029a0fe933d6854655821ae6c91
-
SHA512
50bebd973ea0450606e4ddf441d04d28dea716330caa67f2c5ce5c2ec2545a11781e98248c1a6fbd3cf5a9d08a52d41eba7904fcaa21761ae79789c4296518d8
-
SSDEEP
3072:X2+3T6BZKfV4CLL23nhL++QH8yQLZX1zMfSu3r1CS4bixcZ/Q:mQtL23hK+QH8yOZSlATycpQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f150c26af615724bd5c4d536b09233e0_JaffaCakes118
Files
-
f150c26af615724bd5c4d536b09233e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE