Behavioral task
behavioral1
Sample
f4b78f022158bf6870c343d30fec0eb5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4b78f022158bf6870c343d30fec0eb5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4b78f022158bf6870c343d30fec0eb5_JaffaCakes118
-
Size
3.9MB
-
MD5
f4b78f022158bf6870c343d30fec0eb5
-
SHA1
6ad15829913d1110194264d62230811922521635
-
SHA256
f7a2c4a3af7435ea96e50c440d9aabc3761518a6c8c07e6358602697fe9e79b9
-
SHA512
dfe222b8d5e1ef31968b861ee6d6d792376e3bf32df9352a7eed43bd2fdecc64a583f14cdc0565df32832c1c18d1dabd819612eb9bb6d84b3f6d52b37348d8ea
-
SSDEEP
98304:kAiPkZuqQEcYT3ecakcibiqhMbMgOn7n0bcakcibiqh2nPY7CQg5aDPaFcakcibr:LiPkZfFidlirybMgOnkdlir4nPUzgYD3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4b78f022158bf6870c343d30fec0eb5_JaffaCakes118
Files
-
f4b78f022158bf6870c343d30fec0eb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE