Behavioral task
behavioral1
Sample
f95a29953072568da7c86fdc137f881b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f95a29953072568da7c86fdc137f881b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f95a29953072568da7c86fdc137f881b_JaffaCakes118
-
Size
1003KB
-
MD5
f95a29953072568da7c86fdc137f881b
-
SHA1
5ccf4afbc1f535e1be40e86e3c720ecd964026d3
-
SHA256
49dd82d95049aa19ee1eb13a807f343425bc5d0d38a2e0a7c7a54d1553c8ee3f
-
SHA512
a37d75b4dc1724ebf32e96fa2ee7bb37b5ff07440b9c17c05f44d13f565306cd8c2be3e93a1f55f877f270fcefd964b719c03eb51656d475b6a467c2d7d4cdd1
-
SSDEEP
24576:R7uKw4TPGIYtt0EGUXmJIGzyoTbW/yZlkh8DL4wj:R7uKzpYtt0E1XmmGztW/Mkh8DL4wj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f95a29953072568da7c86fdc137f881b_JaffaCakes118
Files
-
f95a29953072568da7c86fdc137f881b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE