Behavioral task
behavioral1
Sample
f6b36b04b5fee7d0b2f9a0ac87d47b8b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6b36b04b5fee7d0b2f9a0ac87d47b8b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6b36b04b5fee7d0b2f9a0ac87d47b8b_JaffaCakes118
-
Size
57KB
-
MD5
f6b36b04b5fee7d0b2f9a0ac87d47b8b
-
SHA1
9d45295bb5fd442e577f4b4b56dac33041788743
-
SHA256
11d1e45afe2a45e884f2ca03656a31ecfd01023ff32a11d3d14702c3f6ca62a4
-
SHA512
9a04fb674d9cae2cbb8b835bce77607f6ca4cbb5e0f39bd45563378e53f3fe7e75daeebb1bf376a949491a0ef6de3528d0eb3cef0f27206baaf71be24084dabc
-
SSDEEP
1536:TbLEvgmrs5AwWJHJ00NQJ/b6UtzNcn+H2hZuB9xt7NI:TbLGJAiwmp00KBmUtE+2uzxBNI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b36b04b5fee7d0b2f9a0ac87d47b8b_JaffaCakes118
Files
-
f6b36b04b5fee7d0b2f9a0ac87d47b8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 182KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE