Behavioral task
behavioral1
Sample
f3492c4eb37a4d6106a6cc55c7c8577f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3492c4eb37a4d6106a6cc55c7c8577f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3492c4eb37a4d6106a6cc55c7c8577f_JaffaCakes118
-
Size
2.0MB
-
MD5
f3492c4eb37a4d6106a6cc55c7c8577f
-
SHA1
a8a48a2383fd31173b59036724273f19f4d5584a
-
SHA256
cdaa203bad6534b2cc4fdbec72a047aa7d965faee9c687fd90ef6b90f4f83ae6
-
SHA512
3b271f7bf7b71381a6f07ab672c2d4f82cacf4a8841c0887f76a2e2e69f1d881ce23fcf8e34d2e3473d4e2be1469b673f85a6f7537899aa34bca1cfe724569e3
-
SSDEEP
49152:30MwGyvh3dG37FmGWzr9HvUMlujnKjYIX+3DmGWzr:kMwGyvh3g7FAf9HbujnKj5ODAf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3492c4eb37a4d6106a6cc55c7c8577f_JaffaCakes118
Files
-
f3492c4eb37a4d6106a6cc55c7c8577f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE