Behavioral task
behavioral1
Sample
fe73f5164bdff50e9f314966d3946f5c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe73f5164bdff50e9f314966d3946f5c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fe73f5164bdff50e9f314966d3946f5c_JaffaCakes118
-
Size
1.3MB
-
MD5
fe73f5164bdff50e9f314966d3946f5c
-
SHA1
07ad46d1f44df7431b8837b45b82ad3001192af5
-
SHA256
091abcfa69fa74ff99b9729d75256629549ad357ae9f03e99b43d142f9498efd
-
SHA512
1d987f78a75fc64e99c5d8138d28ae00ef2a13fe1e244952d386fab4f45a6d08e87b750f95bbaf7d76abfb3be1f41e78ed18a71af91ccf2c60caabe68322ae94
-
SSDEEP
24576:wSdZEwpK2MZ4hZwfSYXC72GIUkrgtGAAdxlCcUXDxcY129IZlxabgRoxpndreeZp:wS3EwpK2MZAwfdy7gAVCxwcUNcYQCZlM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe73f5164bdff50e9f314966d3946f5c_JaffaCakes118
Files
-
fe73f5164bdff50e9f314966d3946f5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE