Behavioral task
behavioral1
Sample
f9fd187c1c075ba850ad7560019d9e30_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9fd187c1c075ba850ad7560019d9e30_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f9fd187c1c075ba850ad7560019d9e30_JaffaCakes118
-
Size
269KB
-
MD5
f9fd187c1c075ba850ad7560019d9e30
-
SHA1
c48755e41318ce2d3df1351bff6814edb2693178
-
SHA256
4ebdcf0f11ec5cca139b3203c32ac5fdda980ebfd154197eba580393a418741d
-
SHA512
21268466987d577029ddbc4b6ccf0b8067f8b607e8618ad3d9229944fe44d56b50d0392f5b8fcafc3fa34fc6804b71621306d696ce29eb1a14622093be9bb5b0
-
SSDEEP
6144:EfxqEJZygdmIiT2uwlRawvrW7NSNukIsyD2cab4:Efxfn4lwjVrp0Qy5ab4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9fd187c1c075ba850ad7560019d9e30_JaffaCakes118
Files
-
f9fd187c1c075ba850ad7560019d9e30_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64B - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 267KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE