Behavioral task
behavioral1
Sample
f5539604f05037904e1977ccfaec6f65_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5539604f05037904e1977ccfaec6f65_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5539604f05037904e1977ccfaec6f65_JaffaCakes118
-
Size
3.9MB
-
MD5
f5539604f05037904e1977ccfaec6f65
-
SHA1
a899cd57521327f321c531922391072d1f76dd19
-
SHA256
08103a25b64274a9a7b65628b613c6db84a2cd10549ec225bfdfa39842eba33b
-
SHA512
2a89ebb70497a92e0167aadb6c816c4afac6b8f3a0737aeb99c82a855179009fb8d87fba47883f7a93b34f9002474ea34c7a9a94fcf30f22989190a5b67d2032
-
SSDEEP
98304:f4THS4cakcibiqhMbMgOn7n0bcakcibiqha0ixsHYaUBkhcakcibiqhMbMgOn7nR:f4THXdlirybMgOnkdlirgjjaY4dlirys
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5539604f05037904e1977ccfaec6f65_JaffaCakes118
Files
-
f5539604f05037904e1977ccfaec6f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE