Behavioral task
behavioral1
Sample
ff9e0d0138b43c6062e02422157bb25c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff9e0d0138b43c6062e02422157bb25c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ff9e0d0138b43c6062e02422157bb25c_JaffaCakes118
-
Size
853KB
-
MD5
ff9e0d0138b43c6062e02422157bb25c
-
SHA1
cbe32e9a1ba16db9577119564748efec5b295374
-
SHA256
eadcfc16d6b88d2a66b5151b20d7803796ffb4352f5f8e69ce58242067d64cf9
-
SHA512
4390a417ee9b52cd775d40326bfd5e70013a702b39ee4d840b1b745a1a12d30d3e2042bf4727dde631238ada423b8301909649dc31929913de847dc9ee7ba537
-
SSDEEP
24576:cSReI1xNiSLHFvXXpQ3T4s9rgDZVqiCRtxp/hc89c70:reI1xN3LHpnpW1tgDvmH/S8W7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff9e0d0138b43c6062e02422157bb25c_JaffaCakes118
Files
-
ff9e0d0138b43c6062e02422157bb25c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 835KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE