Behavioral task
behavioral1
Sample
f5755287b7c71d60cf08713df3f695bf_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f5755287b7c71d60cf08713df3f695bf_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5755287b7c71d60cf08713df3f695bf_JaffaCakes118
-
Size
5.8MB
-
MD5
f5755287b7c71d60cf08713df3f695bf
-
SHA1
fb6b2900c937516546f53598865c327f1cceb789
-
SHA256
cd90778d87f99a0eed947bc1d053175edcbeca41e15ec5714ba9651d7aaf3624
-
SHA512
e4b0ffddcebcdf72a736524e1d5c9f43a16075e1447420fd11f2479713edc2f71c31bffb3fc2671d946b0c7c4eddb67849a98d6aa1d862e7bd10a68fb5421417
-
SSDEEP
98304:dCDoR5Egg3gnl/IVUs1jePsqthvHrFHa7a1gg3gnl/IVUs1jePs:degl/iBiPftLIagl/iBiP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5755287b7c71d60cf08713df3f695bf_JaffaCakes118
Files
-
f5755287b7c71d60cf08713df3f695bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE