Behavioral task
behavioral1
Sample
ffeb6b1e31e811cb25faa096c7050724_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ffeb6b1e31e811cb25faa096c7050724_JaffaCakes118
-
Size
784KB
-
MD5
ffeb6b1e31e811cb25faa096c7050724
-
SHA1
11f0cf0f85eaa0d3ecd76c0497b687e6d86c5a58
-
SHA256
4dc14c5c11b68cb5a9e95deb2663361daa9ce41e7fc2649725491d1c6920a487
-
SHA512
7b243a97733c95d2e57d195fc2157dce0b3d220ead5254597bea54430d81e654f41e22ffcab098fdb925c0db6ebbbd33c534c7d5f5a9582ddaf74401c265f664
-
SSDEEP
12288:D+SxS+EpOAlrbbPIOpwSKl3tyiX+4D5DFBFyWsZHHVQ6wmPsUi39cHpEcxkTB:acSJEAhpwS23hvJF3uHHVrPsUc9aeTB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffeb6b1e31e811cb25faa096c7050724_JaffaCakes118
Files
-
ffeb6b1e31e811cb25faa096c7050724_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE