Behavioral task
behavioral1
Sample
f3bbda27dc65d3c5782d6a9ba95f1737_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3bbda27dc65d3c5782d6a9ba95f1737_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f3bbda27dc65d3c5782d6a9ba95f1737_JaffaCakes118
-
Size
5.8MB
-
MD5
f3bbda27dc65d3c5782d6a9ba95f1737
-
SHA1
cdc799cb15ede74753ee614422623480752481da
-
SHA256
ad94a64ba2a14773fbca5562783ec680921c715eab24dd4ac265992af8b4bb1c
-
SHA512
e6e94f913c5ef0dce46105c643513c05cf66e5c4a85dfb0b64dadb08e24e46d3c4efa369f45fb97e94c559538bd4b27378bc639f8ac57b0e79699abbe520f190
-
SSDEEP
98304:EKRk+nr+Uzqv/osMLwGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+L:EwrxCcL2GhRaaCkN9qHGhRa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3bbda27dc65d3c5782d6a9ba95f1737_JaffaCakes118
Files
-
f3bbda27dc65d3c5782d6a9ba95f1737_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE