Behavioral task
behavioral1
Sample
ff7e05bb1c3eae105f90227bb41dceee_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff7e05bb1c3eae105f90227bb41dceee_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff7e05bb1c3eae105f90227bb41dceee_JaffaCakes118
-
Size
2.6MB
-
MD5
ff7e05bb1c3eae105f90227bb41dceee
-
SHA1
bef56f481e400ae0371464643648546b8b09452e
-
SHA256
0b84dff3392c4852ea4f83dbd88a9b55db31cd4dd79e3e0b7594c6fecac396eb
-
SHA512
aa07f678ee1da070610dc41f9a3cdcc65ed3bfc3a1b11e24ea0f20f5e53aa08f8b7615b346d829fd002e5c5317e4ca957c1979ec203018fa08aef4fd3f181436
-
SSDEEP
49152:v24rC/l/iJKIlVrBg2L6Mazakm+Npmay3:v9g/icQ9fk03
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7e05bb1c3eae105f90227bb41dceee_JaffaCakes118
Files
-
ff7e05bb1c3eae105f90227bb41dceee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE