Behavioral task
behavioral1
Sample
f70d050ec9456908d7ecdd35b3e80b86_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f70d050ec9456908d7ecdd35b3e80b86_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f70d050ec9456908d7ecdd35b3e80b86_JaffaCakes118
-
Size
353KB
-
MD5
f70d050ec9456908d7ecdd35b3e80b86
-
SHA1
41f8732ea495100d27728235d4ae3b92c1dcd25f
-
SHA256
5eb7184fc838e6d363392951d32f0fedfc7770fe24d301dac66957f32202b907
-
SHA512
395c5b46cb6a60bdf95e5fb2cc5051417ded1fc5cfdab5012cf349a4c5d4cc0d4a2eb2e64885bdb770c1ece3b2f5455b3c4fd6f72696a36122f91397cccb0668
-
SSDEEP
6144:a3YcQ0dIWifRUWYD0dzg5lxEX9ZQX+g25oRYdxfsLPrPwo+:nsIZJjw+zGlxEna25oRYTfmE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70d050ec9456908d7ecdd35b3e80b86_JaffaCakes118
Files
-
f70d050ec9456908d7ecdd35b3e80b86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE