Behavioral task
behavioral1
Sample
f5778ef1c5eafbdff3e55bbe408d027b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5778ef1c5eafbdff3e55bbe408d027b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f5778ef1c5eafbdff3e55bbe408d027b_JaffaCakes118
-
Size
1.8MB
-
MD5
f5778ef1c5eafbdff3e55bbe408d027b
-
SHA1
b5ae057cb454b29d5e5f598d14d04810ca3e9354
-
SHA256
ffdf56206fcde77d5e49bea51c87b1da963f089f8914b1ce80472c44edde759e
-
SHA512
51307d68542215495e4057cff58deefd52d85ac73e5aa68c66aa882d8185dd2492d4138ce691787be256116e285e3f6fb383fae42b55d7e1d9c3c18e7a6a6887
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE:SCqm2Jpr0nNM7Dus7Nx2k
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5778ef1c5eafbdff3e55bbe408d027b_JaffaCakes118
Files
-
f5778ef1c5eafbdff3e55bbe408d027b_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE