Behavioral task
behavioral1
Sample
f3d67bcfc988e2e09ce3ee7b8759ccd9_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f3d67bcfc988e2e09ce3ee7b8759ccd9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3d67bcfc988e2e09ce3ee7b8759ccd9_JaffaCakes118
-
Size
1.3MB
-
MD5
f3d67bcfc988e2e09ce3ee7b8759ccd9
-
SHA1
b2999d1b026e97fd82821d53212b745e515e383c
-
SHA256
d1a0dbb14a23827375e1f8f7fec34bb773a8986e822f8b6224233ef20e1d68ec
-
SHA512
f65303b96265cac9cb5e8a9230fc460a26f964254c5990ac8d3f189d5059d82c513b12c9750096792fc39c32a0a4523b10ecb54e564694ef25e0334deb4cdfe7
-
SSDEEP
24576:RaN7ZxX7c1GKe0ZO3SMS8/T6Jilo2TuqC6h5uwtb1OpCCRQv95AASIuAX0vG:EZ9gZeDVd2EloQu6lKC5VSIuA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3d67bcfc988e2e09ce3ee7b8759ccd9_JaffaCakes118
Files
-
f3d67bcfc988e2e09ce3ee7b8759ccd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE