Behavioral task
behavioral1
Sample
f4bbff92d0d4349425d3645c12f05dbf_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4bbff92d0d4349425d3645c12f05dbf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4bbff92d0d4349425d3645c12f05dbf_JaffaCakes118
-
Size
422KB
-
MD5
f4bbff92d0d4349425d3645c12f05dbf
-
SHA1
c8d0df7cc3dc223cbaedf2baab8925aa267793bb
-
SHA256
7bb1cbb16f86b96b20b5a4b94a16d8d744109d4c6a3013b43646c328201e61d9
-
SHA512
6bc6e85895c07224a016a271eff27163c6cd3c7627413aac85c521fd07e57f9fdecc6b900f569a8f5778f0d52ca2d4f00897f982931792b53530681fe83a2619
-
SSDEEP
12288:kaNLX93ONcOGxRrWYfXVa3tjAsvBENE4n:HLX9+Nc1xhWYdMtAsven
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4bbff92d0d4349425d3645c12f05dbf_JaffaCakes118
Files
-
f4bbff92d0d4349425d3645c12f05dbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 398KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE