Behavioral task
behavioral1
Sample
f4a53cff75f4313bf136da1b0adda47e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4a53cff75f4313bf136da1b0adda47e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4a53cff75f4313bf136da1b0adda47e_JaffaCakes118
-
Size
1.4MB
-
MD5
f4a53cff75f4313bf136da1b0adda47e
-
SHA1
6f90650a5f5671ba465b5a7622b003dcc102001f
-
SHA256
e3afa4a8deeeb70c9efa57762c247e04ccc8bdec0823495ff10472d9b9546a11
-
SHA512
9f98ec4469d0e9f34addd915bdb066cb07e66a3c11c0618bef61aa1ad2017a1223a166fa497889df316d761f5abd25abdee1b80e9545195aa4d8af5c0db5267f
-
SSDEEP
24576:Uh+rqmcU9WbH78itTKJgnJidia/lyQy7iKOyY8MS8:2+ObAiIJKMtyQsONZt
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4a53cff75f4313bf136da1b0adda47e_JaffaCakes118
Files
-
f4a53cff75f4313bf136da1b0adda47e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 920KB - Virtual size: 920KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 482KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE