Behavioral task
behavioral1
Sample
f3aae9b8518e92b57f59aeccbeefd464_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3aae9b8518e92b57f59aeccbeefd464_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3aae9b8518e92b57f59aeccbeefd464_JaffaCakes118
-
Size
3.2MB
-
MD5
f3aae9b8518e92b57f59aeccbeefd464
-
SHA1
24c7d8ebb68f5ef49c29ec80ea12b533b19b0693
-
SHA256
50817551a8b302284796e65d6b5cacd3eb6b8628672a37194b57b692095123e2
-
SHA512
65ebf951d47decc4c9783a4c80dd319574a2619f28ec2dc126b927b84fe22a935e6f13d3906fcf1d5dd5a17149856470f52004e64f2fa45a4d42a68c9a4a21d4
-
SSDEEP
98304:SNG79dBsPlkuwDmgcakcg08tVDucXS0CrcakcPMUmCDd2YOAcakcg08tVDucXS0V:j7BxAgdlb0XRqdlPMUDSAdlb0XRqdlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3aae9b8518e92b57f59aeccbeefd464_JaffaCakes118
Files
-
f3aae9b8518e92b57f59aeccbeefd464_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE