Behavioral task
behavioral1
Sample
f57c9dec42d54a3e30214b38e5766caa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f57c9dec42d54a3e30214b38e5766caa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f57c9dec42d54a3e30214b38e5766caa_JaffaCakes118
-
Size
6.4MB
-
MD5
f57c9dec42d54a3e30214b38e5766caa
-
SHA1
935c67f0834ee600a4a35084e1d8f184f2b7723e
-
SHA256
8f3fa3bd6955b9d7c75a703026c005de7ad8e7f20a990ccbe5c2e11100a221aa
-
SHA512
d93782ac3d459c5c5b4149ffb401a70f238bf7912f35beffd23515e2a9a7f2f7ab6b7b76b2e65df0090804cd151e267b7a10a0a00a28b8366112ef328e1465eb
-
SSDEEP
196608:C38dlhS87cdl5JskTdlhS87cdlpbs2BadlhS87cdl5JskTdlhS87cdlO:CIS8IJ3S8Kbs2gS8IJ3S8b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f57c9dec42d54a3e30214b38e5766caa_JaffaCakes118
Files
-
f57c9dec42d54a3e30214b38e5766caa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE