Behavioral task
behavioral1
Sample
f5bd55a5517371347e4ee940cbba4367_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5bd55a5517371347e4ee940cbba4367_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f5bd55a5517371347e4ee940cbba4367_JaffaCakes118
-
Size
266KB
-
MD5
f5bd55a5517371347e4ee940cbba4367
-
SHA1
1154e26a7a535e800740c2b0a4800b42e67fded6
-
SHA256
8d605d027ad951c1a1e32d647ce09b1332b183be1ea17a6c604f5429c1e51c87
-
SHA512
686a130b602161bd1c95241bc5249c7b2a15b76e593f66605ef6460735e80494de8efcc754db3516795bb8b01e3c9bd58050bd671e31337e6d9b626f484afccd
-
SSDEEP
6144:ZaiOv8GyD1N9VX8i+OXWdPMMEDhUlIpEdfDvOO6UM8LvFMjV2Q:ZaiOv8FD9VMijXWNED0dfqOrtFiB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5bd55a5517371347e4ee940cbba4367_JaffaCakes118
Files
-
f5bd55a5517371347e4ee940cbba4367_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE