Behavioral task
behavioral1
Sample
f2f6545ba6b3a0aabaab0e512982b03f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2f6545ba6b3a0aabaab0e512982b03f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2f6545ba6b3a0aabaab0e512982b03f_JaffaCakes118
-
Size
17KB
-
MD5
f2f6545ba6b3a0aabaab0e512982b03f
-
SHA1
812e00cd2032a61b4a84227c30529ff14707fd22
-
SHA256
e7058aa0a4d8cd6d9f6b4b83de8c6f477ac1aa4fceb64bf6b3b871ad13c1b834
-
SHA512
d522b9cf4bb30ece73ad245f36735c4a3e37c9722537c245928e4f2e3775e01a5d06d7a5edb20fc04a84a36d615fdc96dff3e167a4c9b3ab6d50364f9a2b3496
-
SSDEEP
192:nQx88PwO8qU/LDZJpuuU8hsTJ6jPyztWz8lpZ2vlr8l+Sykth3et24Yvm1PHwlBh:dLDTs8hsF6qtK8lzQ8+Sych3mYvCPHxo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2f6545ba6b3a0aabaab0e512982b03f_JaffaCakes118
Files
-
f2f6545ba6b3a0aabaab0e512982b03f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX3 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ