Behavioral task
behavioral1
Sample
f65be2772f1fa250a0ae60c97bc63e90_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f65be2772f1fa250a0ae60c97bc63e90_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f65be2772f1fa250a0ae60c97bc63e90_JaffaCakes118
-
Size
1.5MB
-
MD5
f65be2772f1fa250a0ae60c97bc63e90
-
SHA1
e2fda770a9f3d7137a3a7bb1b8167f235a59d5d0
-
SHA256
db74a0a5c467e626a0554834473f20f6f69ab3b0de5bca67e444980aaf99207a
-
SHA512
73e621f938b66fb84b5f8f2e35eb68ff7838ea2bc07877bc7a05c21f450e052f49d17ec025fded854d074cd316957ffa2a25c327692904b6f0b6901f5f9a1de4
-
SSDEEP
24576:nPqF1uwcJq6ZBQPWel/9k8qBDFtgUNIC9VwXynIkX/HQ0DhDVnIW:ZRr4WelV8DFtgC5n5vw0tpI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65be2772f1fa250a0ae60c97bc63e90_JaffaCakes118
Files
-
f65be2772f1fa250a0ae60c97bc63e90_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE