Behavioral task
behavioral1
Sample
f74822778c06b7dd5a6342856f3d6497_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f74822778c06b7dd5a6342856f3d6497_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f74822778c06b7dd5a6342856f3d6497_JaffaCakes118
-
Size
2.7MB
-
MD5
f74822778c06b7dd5a6342856f3d6497
-
SHA1
20b896c54c11e51ecb2212bd29f550ad511fc942
-
SHA256
99663a65333273b43649174ee03eaef643822bbcd2f60f181d785ca49388317b
-
SHA512
423c5f167d57476e3380d990b5701456b3b55c5ce89decf28d4eae810bd537405287be98a7410dd86305ae6fac5ce1ee9e50c236944923db0f6f8023170eb39e
-
SSDEEP
49152:El1EHuEiK7vfEZN83aPoKwdnc5JEbq80n6LBWTw67sPTc:ETEHliOy+aAyJ+qLwiw67sA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f74822778c06b7dd5a6342856f3d6497_JaffaCakes118
Files
-
f74822778c06b7dd5a6342856f3d6497_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE