Behavioral task
behavioral1
Sample
fef68d06e5046033d7eed66dfbe5a594_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fef68d06e5046033d7eed66dfbe5a594_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fef68d06e5046033d7eed66dfbe5a594_JaffaCakes118
-
Size
1003KB
-
MD5
fef68d06e5046033d7eed66dfbe5a594
-
SHA1
cf4c26a682041da126ea3b31fba98e9c5f5d7d49
-
SHA256
41a514d7a39ef58a6634242f8804df59a6693c3c529ecfeb14465df3c8938b1f
-
SHA512
c76dad7a729e0be797e8adbfe747c0449646bbb80b3baccdf9771255430db45fef5d92de690ae0b97067ecf11e319f949650fb71f3d43937c89a0f5ae82e5dbc
-
SSDEEP
12288:LdgduoC2+8URCHqhlNOcRYDuOdheZ//MbkR4pLHkEAyj5OS6tpne5a1IRgviR1Hc:5x2aO+ku9Z//MZPHke5gEgKjwnS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fef68d06e5046033d7eed66dfbe5a594_JaffaCakes118
Files
-
fef68d06e5046033d7eed66dfbe5a594_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE