Behavioral task
behavioral1
Sample
f606dd8c76366f314a7712775ec81f8f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f606dd8c76366f314a7712775ec81f8f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f606dd8c76366f314a7712775ec81f8f_JaffaCakes118
-
Size
1.3MB
-
MD5
f606dd8c76366f314a7712775ec81f8f
-
SHA1
1793b1fde107d387792eb41bfae26af82f93f4ac
-
SHA256
62df47ac6131e268a0b25fd3d9d0018b82f307cd1d4fae68e2d06940b33741a7
-
SHA512
f0bfb7adc3fc634e810552e2cdd28ddd00b3acbdd54e6aacd4590a9cde1c279a83037906272729ac4e26e3fe693d984fd1e421f1c55bae917e895381846101c6
-
SSDEEP
24576:h83AFRoGt50zPFQe9CJfrIUFu4mQSH05Hpku7GeINsYcZEDGA4WO:u3eRow0zJ9CJzIUFgCJkuSeO3JDGA4f
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f606dd8c76366f314a7712775ec81f8f_JaffaCakes118
Files
-
f606dd8c76366f314a7712775ec81f8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE