Behavioral task
behavioral1
Sample
f87fecd9b4b17960a6290d8de71827d9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f87fecd9b4b17960a6290d8de71827d9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f87fecd9b4b17960a6290d8de71827d9_JaffaCakes118
-
Size
18KB
-
MD5
f87fecd9b4b17960a6290d8de71827d9
-
SHA1
13a0f8d783e29f3a4f0a08ad31564bf75aa7a8d6
-
SHA256
79fcb228d20324374aa7bcb17edef7130d918d7cf4065cc2f9a8c42c5049eaad
-
SHA512
499f480ee8c8bf414749a341a9e71d71c5e0d038951610abd7074c04f35a33be08927e74217539af420e6fff6fc32fd0c090197b21036b0216be1ba15bfa85e8
-
SSDEEP
384:PtGAUiPqt9iQpQNbJWfaCqrTL00+TIrFX7U541VmXAq/MKwfhke+UT:PvUiPIUYm+afTL09TIrFrU541VmXxkKc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f87fecd9b4b17960a6290d8de71827d9_JaffaCakes118
Files
-
f87fecd9b4b17960a6290d8de71827d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_win Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE