Behavioral task
behavioral1
Sample
feb61994b815c7f834e19b6db285fedc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
feb61994b815c7f834e19b6db285fedc_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
feb61994b815c7f834e19b6db285fedc_JaffaCakes118
-
Size
2.9MB
-
MD5
feb61994b815c7f834e19b6db285fedc
-
SHA1
4708208b00e174654556aae8c10f6834e9c5eb38
-
SHA256
2da22620081809fa4950c13b1897cd023fb9272a1873660eab4027dbc070eda5
-
SHA512
c79540accebd1f7e1402f37404f71b2efb6bb6edbba0ed3d36f91c39272795ecb7c51ca005a2a58416eb77122f491105c6d319f4d7cfedf6dec7510df7455cce
-
SSDEEP
49152:TagELZBed8kNQTcgK+JRwxG66F6IXeldN74NH5HUyNRcUsCVOzetdZJ:Tj8i8kNQpK++GhwIY4HBUCczzM3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb61994b815c7f834e19b6db285fedc_JaffaCakes118
Files
-
feb61994b815c7f834e19b6db285fedc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE