Behavioral task
behavioral1
Sample
f16eaa04f5be2ba89c6213bfba96f7df_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f16eaa04f5be2ba89c6213bfba96f7df_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f16eaa04f5be2ba89c6213bfba96f7df_JaffaCakes118
-
Size
303KB
-
MD5
f16eaa04f5be2ba89c6213bfba96f7df
-
SHA1
6967ca9739aba4d3d3cbd8fa59e4b226b6c45850
-
SHA256
d580c7048f47de0abad1a50c668eee667448b85fd39e9026561c941a4ce44149
-
SHA512
4579ad3cbb60645a77bfb99aa0c7a686d5ad08cee9bd27103739c883659ddcf1dbfff74698d0d1437492ebc4188b10c72a04793e4dc8fb7d62279b9176ad74f6
-
SSDEEP
6144:Gm5/ldZGwZc7gzaGGezPewlPuR/+9aVG9I9TpBRLycB9Z:D/bZE752lPuRgI5bRO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16eaa04f5be2ba89c6213bfba96f7df_JaffaCakes118
Files
-
f16eaa04f5be2ba89c6213bfba96f7df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 512KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 296KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE