Behavioral task
behavioral1
Sample
f47e750f24ddb5a37eb7588766853150_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f47e750f24ddb5a37eb7588766853150_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f47e750f24ddb5a37eb7588766853150_JaffaCakes118
-
Size
50KB
-
MD5
f47e750f24ddb5a37eb7588766853150
-
SHA1
d189fc481c34138919ee8c298e0f6303fffde2fb
-
SHA256
5d29cc294d4a3e1b7670094a2deb007ed5589bd5d6e4dd1b81d5db3b3df53be9
-
SHA512
bf75fe5d67d8908108a8efaa3d8328c3623209f320beab29df30752c30f6865cded4d7e5d43471487a5a315d2eafd61b9bf9dea8274ff9d73109a4d5d2e67f19
-
SSDEEP
1536:BuSBnQXZ4ZdRCUsRKVhd61uZDH3Knouy8:QSBQX204qcCout
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f47e750f24ddb5a37eb7588766853150_JaffaCakes118
Files
-
f47e750f24ddb5a37eb7588766853150_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE