Behavioral task
behavioral1
Sample
f2f052b9b5f0355e202a0b61a9beae10_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2f052b9b5f0355e202a0b61a9beae10_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2f052b9b5f0355e202a0b61a9beae10_JaffaCakes118
-
Size
116KB
-
MD5
f2f052b9b5f0355e202a0b61a9beae10
-
SHA1
96dc598659f91724c26141e0c3a8475bdad83247
-
SHA256
daec38427a095a81c659710a0411b0c0fd641af644163f73e4ba86f646239337
-
SHA512
955e9cbf5c1dffe02b67ac6b7529fb60764a300ed37ee793d3e9333f5478ac3cd88f46c5ed0ed2f3b6f287bad7663c50a29481f4bc14e9e000d636a2d3c72411
-
SSDEEP
1536:lxQJdICoXMD7sIJUcBXq/2SzW6kn2/Bow96vru1dH/kp1bu+nDxR+9wUlHKYScjk:DQJaE79qYrvoH/AJrxRrGqAPv2B97z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2f052b9b5f0355e202a0b61a9beae10_JaffaCakes118
Files
-
f2f052b9b5f0355e202a0b61a9beae10_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE