Behavioral task
behavioral1
Sample
ff7a4c7cf9b7a54eefd17de7f3944d11_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff7a4c7cf9b7a54eefd17de7f3944d11_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff7a4c7cf9b7a54eefd17de7f3944d11_JaffaCakes118
-
Size
1.5MB
-
MD5
ff7a4c7cf9b7a54eefd17de7f3944d11
-
SHA1
8c93a738bfb3f98bbfce855427c1c0fdcf45eb2c
-
SHA256
06f289cb772822df9b7301422f2c1b2dbd5f7209751368ae2bd378e0670b1c3b
-
SHA512
3ac8496892380902397e94f0755c0193b00c81797c4244880e0a47555043a99622f7e20d3ab5ac1fc3d8ab3070cc6bb54788fcedb5cd7928b281656063e3807e
-
SSDEEP
24576:hzOPMPjUj9GpQSdEji5cjukL2siyBpukruJ3Z6T6DqGUUstcjukL2Y:l0MPjUUpQSdEji5cakLhukrCZ6T6GfUX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7a4c7cf9b7a54eefd17de7f3944d11_JaffaCakes118
Files
-
ff7a4c7cf9b7a54eefd17de7f3944d11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE