Behavioral task
behavioral1
Sample
f1c8e567a8cefb46773c456cd28577c7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1c8e567a8cefb46773c456cd28577c7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f1c8e567a8cefb46773c456cd28577c7_JaffaCakes118
-
Size
23KB
-
MD5
f1c8e567a8cefb46773c456cd28577c7
-
SHA1
25cf8dc70d97e88d77c49e3aee4a0b73fa15cb15
-
SHA256
aa2d233b15b0abf876ad3d9201652c129aa8e554d4743417f37803c81d07f812
-
SHA512
58d66ec7494ed6a6c6e5fa3f94105e6659cfdfaddd9e5d9b61bbb99c693e1aeb77159bf5afc1171f4e60694b77bc5f7f02b54872ec6d9969f6f5d1827b29cc8c
-
SSDEEP
384:z8fjE9UXjp06o/hLMZkSaIMS5YXUjxloTqFU0W0JujwkEv1:zu4+K6OhL698Hma+oZjFY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1c8e567a8cefb46773c456cd28577c7_JaffaCakes118
Files
-
f1c8e567a8cefb46773c456cd28577c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE