Behavioral task
behavioral1
Sample
f9497f42bfa957474b36af715d7f1f07_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9497f42bfa957474b36af715d7f1f07_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9497f42bfa957474b36af715d7f1f07_JaffaCakes118
-
Size
1.6MB
-
MD5
f9497f42bfa957474b36af715d7f1f07
-
SHA1
44f78401423087d61f2ec14c3983c62cbccf518a
-
SHA256
7adbed75754316bab24a63f75569f4c656747f3810be9b00bcc18a5b028c52eb
-
SHA512
b2c384a163944950818f3f3ce9a66aff8c02f37a458e73c45f4415eaad28e0037d0b12c55902305e59fda673bea0aa7fee54918c4db3ab73fda0025f50d829ef
-
SSDEEP
49152:ITw7LD7iAxFeocakLz0HBDpjg8632wPcakLz0O:GWLD7iAx4ocakchS87ccakcO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9497f42bfa957474b36af715d7f1f07_JaffaCakes118
Files
-
f9497f42bfa957474b36af715d7f1f07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE