Behavioral task
behavioral1
Sample
f63d15330a9f3d6fb15e5009b207cc51_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f63d15330a9f3d6fb15e5009b207cc51_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f63d15330a9f3d6fb15e5009b207cc51_JaffaCakes118
-
Size
1.3MB
-
MD5
f63d15330a9f3d6fb15e5009b207cc51
-
SHA1
e2a3fe599ffa12d43e8296c06eff93b640146c3f
-
SHA256
5371085786d5f700dd51e1d0e801b64450b8048ccd08d67b2b5ca237a4493d9b
-
SHA512
ffc94f7b82796e5e3d59d292a900539a25fe5eb26e83d9ccc00fda6c0eff6207bbd2e40e646a824b27367a8fadd52e1e73e184bfd923ff6b119d5a00eabafda8
-
SSDEEP
24576:MNxQB/5knTwvAuY03nBfg7If5n/ZYkJgzvt0BR7UW4cr84EhxAFxseP+vG:MjEafGXBlflRYtw7lm7AThP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f63d15330a9f3d6fb15e5009b207cc51_JaffaCakes118
Files
-
f63d15330a9f3d6fb15e5009b207cc51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE