Behavioral task
behavioral1
Sample
f3a5e28e4a3f1315830ab23eb1e73635_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3a5e28e4a3f1315830ab23eb1e73635_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3a5e28e4a3f1315830ab23eb1e73635_JaffaCakes118
-
Size
6KB
-
MD5
f3a5e28e4a3f1315830ab23eb1e73635
-
SHA1
fb68e4cded9308959d2900d05246312f724c6149
-
SHA256
5f0bcd3bdd137e0ba29b94205abc537a720049d11fa6b5c03fbbfb145e36a26b
-
SHA512
e29658fd790accbf26e2afee65c436365e1d358c918a88de249ccf669a47b06845019c487c226c0e013287526ef3e580e7986c16e49f4ec265fa034d9ab0a8b3
-
SSDEEP
48:C9UKqFiApX+jPLj4NG+ECpmPS8A/S7/dKe3WhoJpCvbSKYvIk99gZAxFgpG8Qw07:gc7X+jTeEgxS7w8WKQS9IAxFgYTwSXZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a5e28e4a3f1315830ab23eb1e73635_JaffaCakes118
Files
-
f3a5e28e4a3f1315830ab23eb1e73635_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE