Behavioral task
behavioral1
Sample
f8882d0f36e7b94d9094f1ae64f9d133_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8882d0f36e7b94d9094f1ae64f9d133_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8882d0f36e7b94d9094f1ae64f9d133_JaffaCakes118
-
Size
1.8MB
-
MD5
f8882d0f36e7b94d9094f1ae64f9d133
-
SHA1
6f8a713a42b638e1f08ba16f123166150ac6e1af
-
SHA256
ec9deb3ff41f5ac5e8782c4f2baf3fe51505765802c02fb2f58b19c7c6c38bd9
-
SHA512
69647b68a5f1fc2d93134e5630d224593a0e66bc16419a66bd959502a17ec9d23df7f2db323648301f450472a7537d079e2170df77169a71bfc6c20fe069183f
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqZ:SCqm2Jpr0nNM7Dus7NxY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8882d0f36e7b94d9094f1ae64f9d133_JaffaCakes118
Files
-
f8882d0f36e7b94d9094f1ae64f9d133_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE