Behavioral task
behavioral1
Sample
f92cd8a726a417208f286c755f27b95f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f92cd8a726a417208f286c755f27b95f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f92cd8a726a417208f286c755f27b95f_JaffaCakes118
-
Size
2.6MB
-
MD5
f92cd8a726a417208f286c755f27b95f
-
SHA1
b38bafcb0230caf93cb01694a7a9f76a33592f57
-
SHA256
9aa1c61a8e7f40946fdff9e8ba8dfcdd57d4897e94d83ddbc61e5d1dd6d66cb8
-
SHA512
9527e9e71ac36d046b3758887fe40b3484d574f9ea187b38ca258ee9b0ed48a88b01cc8983111d3a203c26e121bc00601c60c9cf91294de4ecbc8199c288cd62
-
SSDEEP
49152:rNWQ0wZbOChXLh+i8PMsGyT7LQCqd5maDZYay3:ZJ0wZSCVFyXY5maK3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f92cd8a726a417208f286c755f27b95f_JaffaCakes118
Files
-
f92cd8a726a417208f286c755f27b95f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE