Behavioral task
behavioral1
Sample
f3ddd7d0eac0bd8a488284d6ad6cf454_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f3ddd7d0eac0bd8a488284d6ad6cf454_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3ddd7d0eac0bd8a488284d6ad6cf454_JaffaCakes118
-
Size
10.2MB
-
MD5
f3ddd7d0eac0bd8a488284d6ad6cf454
-
SHA1
5e3c524ae40e6790f771337783aa4f8fc9ee821a
-
SHA256
b51b5fdce4e704be7cb10fc80e527d3a56236bb4ba9140eb47355df45aa610dd
-
SHA512
481acda3f30a8022a6c72b89630f5e01250219f286984cd81747ebe3a1a1b5206fafa83aff1b88a9f79dc1a656b922e94b534304eb606e0fce6d6cea0932472d
-
SSDEEP
98304:xUoZWYGSAq5VKPhHz603zKi34OH3L/2EH+mIZ28IeHWJjU3zKi34OH3:JMYXAjhTfzo6/d+mm285HWJj+zo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3ddd7d0eac0bd8a488284d6ad6cf454_JaffaCakes118
Files
-
f3ddd7d0eac0bd8a488284d6ad6cf454_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE