Behavioral task
behavioral1
Sample
f3b61a0bf19e42fe38287826bdb0a5a3_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f3b61a0bf19e42fe38287826bdb0a5a3_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3b61a0bf19e42fe38287826bdb0a5a3_JaffaCakes118
-
Size
2.7MB
-
MD5
f3b61a0bf19e42fe38287826bdb0a5a3
-
SHA1
286ae20944fa28bd85773b2e3b18c6d612790e38
-
SHA256
7847d70ed97eee019d410cd94e22214d8fa67c67a7675d74c0d77ea7555e35e4
-
SHA512
9f54866d81cfe2dc8196db44187164573f11bfdb99fa105139c410367351eade44fffa965a1e57182bad500377f94213d8a0987f0a228774bf01af28888681e9
-
SSDEEP
49152:X9o0EITx9s9jY0k8R6AH7R9/KE0V2opxgnBEPZRj3t9u550QnjmfvW2R9j:XO0s9jPkcRbH/n0VbPbZFO5LgvxHj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3b61a0bf19e42fe38287826bdb0a5a3_JaffaCakes118
Files
-
f3b61a0bf19e42fe38287826bdb0a5a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE