Behavioral task
behavioral1
Sample
f85ee45cf0e35719ba1d4a64ace86ff0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f85ee45cf0e35719ba1d4a64ace86ff0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f85ee45cf0e35719ba1d4a64ace86ff0_JaffaCakes118
-
Size
5.1MB
-
MD5
f85ee45cf0e35719ba1d4a64ace86ff0
-
SHA1
7ccb97c4f0b1383496117b8eea608af110f7af20
-
SHA256
32aa1e30630db08e1aaf3e222a4cf45e175050699e1f0cfd13d18c0b5811eb9d
-
SHA512
32b5f4aabc7d061bfb7b9231bb165c2ad2e61af08818cfbfe6a28f32afa8537a0dc6e4d890cb8fda491d69e8701f887a741c7ea7f0b2f56ff62bc9dba7ce2774
-
SSDEEP
98304:X2+Aa+h0ENBfon3S11qronI0Iy5fKP7grvYLS3:sa+h0gf9a0j9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f85ee45cf0e35719ba1d4a64ace86ff0_JaffaCakes118
Files
-
f85ee45cf0e35719ba1d4a64ace86ff0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE