Behavioral task
behavioral1
Sample
f9dbd431ab03b2749730e5b496804e8f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9dbd431ab03b2749730e5b496804e8f_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9dbd431ab03b2749730e5b496804e8f_JaffaCakes118
-
Size
2.0MB
-
MD5
f9dbd431ab03b2749730e5b496804e8f
-
SHA1
6258d3e24bfc9135fd248e1e030e008b202d6650
-
SHA256
7993d91cce6fb2ccb2ac59f4cb6215b69787ec79d4367d32161a786eca23c9a0
-
SHA512
ccf1ffad49d032629fb279030e031a1ecb8ab4046a113ca22b975358ec3b24f04e572e12a5f62dbe864bf6d51687fa47bbe94cdbfd52c5f3d5af3d6e00cf4b5c
-
SSDEEP
49152:4h3tiSyUkRim0XSqZ2wTJtdQWclxCEL/zotH1jwNhdlgDS2rcqZ2wTJtdQWc:a3tiSyUk0m0XnZZOWclxLL/z4H1jwNhH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9dbd431ab03b2749730e5b496804e8f_JaffaCakes118
Files
-
f9dbd431ab03b2749730e5b496804e8f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE