Behavioral task
behavioral1
Sample
f551d0861ac87ffa410122eca9fa5fb7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f551d0861ac87ffa410122eca9fa5fb7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f551d0861ac87ffa410122eca9fa5fb7_JaffaCakes118
-
Size
22KB
-
MD5
f551d0861ac87ffa410122eca9fa5fb7
-
SHA1
172b02a1d633ad9b716f888b8f7d5c8430b92f32
-
SHA256
c64cf543c86394660634b5372fd243e091b3490ed4a24e27c6d2c474cb9ab78b
-
SHA512
21e9122faa3ce7094f6cac4f7e0d4052bbf3f1b68bdf399dfd9d67af1506948bcaef882b3096185010369b269bea78c6f7f70093125f0fead41f5fb6e47ea48e
-
SSDEEP
384:KGs6+qBuJxFkU85zmJaa6iFLEuOHRBV7LPGw/a099lMUk0+Ee4L1Ana+0iXbROXF:1vBgxCaQVHZaJTK1nwMXa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f551d0861ac87ffa410122eca9fa5fb7_JaffaCakes118
Files
-
f551d0861ac87ffa410122eca9fa5fb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE