Behavioral task
behavioral1
Sample
f8ec4fce675ebee38330a61978f7eb8d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f8ec4fce675ebee38330a61978f7eb8d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8ec4fce675ebee38330a61978f7eb8d_JaffaCakes118
-
Size
302KB
-
MD5
f8ec4fce675ebee38330a61978f7eb8d
-
SHA1
92774838e5c2f91a7994da9da739fedd5815c8cd
-
SHA256
391704ce92f63d005784026b985fbf85a93099952844bc496f3b5dc54b700f24
-
SHA512
ffc4c2b17e5fbf4d2199b7869cf04f97e751dd987eb05e2dd6d903a261e184c0f2eec4a315db5a6255379a04d065275f9c8ce808da10df47c7662e32cb3cd12b
-
SSDEEP
6144:xyEbqNwaPN4SwjghFJxNZvV7pFoys3mQ:0Eb+vNrJjZvVFFoys3m
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8ec4fce675ebee38330a61978f7eb8d_JaffaCakes118
Files
-
f8ec4fce675ebee38330a61978f7eb8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE