Behavioral task
behavioral1
Sample
f97a4b1c709649d374dc638365d3f01e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f97a4b1c709649d374dc638365d3f01e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f97a4b1c709649d374dc638365d3f01e_JaffaCakes118
-
Size
331KB
-
MD5
f97a4b1c709649d374dc638365d3f01e
-
SHA1
3b15b70997a7561a10bf610c3a5b27bf61feb640
-
SHA256
97bfc33aaafd59b0b443b05b2f786a046c4ca76453350243df54fe997209558c
-
SHA512
c9756c13353448f4829711971d0d9ed1a1ae63630d5e1c35ba6989519a2c9b30d16a796ed678079f66d55296496018fd65f59af19d6d1cddd49d085064d680b6
-
SSDEEP
6144:0vBZ05ivBZ05aZ05ivBZ05ivpvBZ05aZ05ivI:0pppBppphpBpQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f97a4b1c709649d374dc638365d3f01e_JaffaCakes118
Files
-
f97a4b1c709649d374dc638365d3f01e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE