Behavioral task
behavioral1
Sample
fffb5325f1e9f3fd6b70c435bb5b5c18_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fffb5325f1e9f3fd6b70c435bb5b5c18_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fffb5325f1e9f3fd6b70c435bb5b5c18_JaffaCakes118
-
Size
1.3MB
-
MD5
fffb5325f1e9f3fd6b70c435bb5b5c18
-
SHA1
0fec9a160ee6779a5709676627f69b3517e36b45
-
SHA256
88bfbf3bd76eec67a7facd7bbeec3082c0148bfcfe453b1531fe4ef805e8577a
-
SHA512
dc1b7da0c43fe97bc420c8864b30c7ae9c45e6ffdb821a43ccb81a718616153920e7b76747b321ca242af1d0768622e39b74d21dbf28433fb0128dc5a4635cff
-
SSDEEP
24576:mw7gpXZw0mCKyj+KKEpyUPHK/2DAc58PZczlhvG:dMpKQ9rHK/2DAcKu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fffb5325f1e9f3fd6b70c435bb5b5c18_JaffaCakes118
Files
-
fffb5325f1e9f3fd6b70c435bb5b5c18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE