Behavioral task
behavioral1
Sample
f75ac86a6afbf970da602e1cac99da6a_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f75ac86a6afbf970da602e1cac99da6a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f75ac86a6afbf970da602e1cac99da6a_JaffaCakes118
-
Size
1.8MB
-
MD5
f75ac86a6afbf970da602e1cac99da6a
-
SHA1
645312a02dc123886f86c259e6cb0255a761a85f
-
SHA256
13b25fe869a84aea308d21699d4c4142e0ff740ffdc00bee0e057749336cc958
-
SHA512
e7337c225d119873f6f2d580e75d120afa57b9340d0c061c1dadcab05dc241fdd543a732208f5df53cddb013d6352a7d6cd33d5db3e40b61f7887b20f0239372
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqT:SCqm2Jpr0nNM7Dus7Nxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f75ac86a6afbf970da602e1cac99da6a_JaffaCakes118
Files
-
f75ac86a6afbf970da602e1cac99da6a_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE