Behavioral task
behavioral1
Sample
f9225615635fd5f852f3a1e5896664bc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9225615635fd5f852f3a1e5896664bc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f9225615635fd5f852f3a1e5896664bc_JaffaCakes118
-
Size
325KB
-
MD5
f9225615635fd5f852f3a1e5896664bc
-
SHA1
dcdc7c8322ec9e42b91238582c4ef571a212d3f6
-
SHA256
d240e1a5319ccd8713c30d219722c2b8d6ffa6ac5465b71dd8147af2e48cc404
-
SHA512
9438150bf236d77e97a5cf6a1a3feadd2c15eee73ea1843f834d213112fc1207545f39470e0da19156c0e92b55a1439bb03c7c3f93b2d06dd9af759175e6206e
-
SSDEEP
6144:s4jhR5vglS5tXfH/yTBEHPzdV7i3N1zksMYF/8cvGo/wfkEf+3smJ:xL5uS3fH/gwL7i95vPE6DEfx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9225615635fd5f852f3a1e5896664bc_JaffaCakes118
Files
-
f9225615635fd5f852f3a1e5896664bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 532KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE