Behavioral task
behavioral1
Sample
feae8e4b4105c7d7fa08bb0214ce10d8_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
feae8e4b4105c7d7fa08bb0214ce10d8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
feae8e4b4105c7d7fa08bb0214ce10d8_JaffaCakes118
-
Size
133KB
-
MD5
feae8e4b4105c7d7fa08bb0214ce10d8
-
SHA1
09ab08979da5dd50eef388acd3f428eca0af8cf9
-
SHA256
25aeb4bab43cc6581e95f41012c8b1dff3960cb35ae9cb4bf301ceeef3497f2c
-
SHA512
55fe99da306c6a2e7bb1ca562bd8cbdcdece9db0c6867baa1d1bd55962a2ead873ea1009302e5c0154e64219215e9d0330dfcb9022ee813a72b377ba2d51d3c8
-
SSDEEP
3072:lPp97i4UbkTrWIJI4USsENthgfqsk0LGsoO3B/LmRn20l2nvoloiA2Q:lPGkTihB+vgq0LaKLmRn2w2nQM2Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feae8e4b4105c7d7fa08bb0214ce10d8_JaffaCakes118
Files
-
feae8e4b4105c7d7fa08bb0214ce10d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE