Behavioral task
behavioral1
Sample
f947f51cbbc3004ac2c837fd8eeb4a1c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f947f51cbbc3004ac2c837fd8eeb4a1c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f947f51cbbc3004ac2c837fd8eeb4a1c_JaffaCakes118
-
Size
682KB
-
MD5
f947f51cbbc3004ac2c837fd8eeb4a1c
-
SHA1
b2ea6a931cb5961c0f753cd13a6913feee0a8703
-
SHA256
206e54faab2d8907e51dc12f21a654ec651afd76ed3a58ddd234e8c90bafaebc
-
SHA512
bde26c6500562e1f46ef92ff0bc1f0c97ab4856da443316cdecdb2b79fca565f0d0948a564ccc009bf5906ba60408362697d8f78e1f2993a8bd2b20dceb3a889
-
SSDEEP
12288:oKmobmi5U59nbWPuCVWNi8yHaC4hL60xodq38Z687h98S1TacO9:oHoCi5mnbSudN1yHaCAxl848U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f947f51cbbc3004ac2c837fd8eeb4a1c_JaffaCakes118
Files
-
f947f51cbbc3004ac2c837fd8eeb4a1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 393KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE