Behavioral task
behavioral1
Sample
01fe5f1b5a477e27a83d690f698d3d19_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
01fe5f1b5a477e27a83d690f698d3d19_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
01fe5f1b5a477e27a83d690f698d3d19_JaffaCakes118
-
Size
90KB
-
MD5
01fe5f1b5a477e27a83d690f698d3d19
-
SHA1
2ac8653ed4c3ea9b22eaaa8f62b675cffd385a68
-
SHA256
6cbfd741b030032f747d637d1019b0aa9faf28d52863f1a33d9ebf50adf4f1c1
-
SHA512
c99c852f6551d4b603ecbfe4e343815a639da83c5149449d41a90668617eeed216c99074d6c910ec3ce3940f35988aa99ead65e766d346d897f8c944500b4b6f
-
SSDEEP
384:frcRQVThnnZw1GawTPF5VJ2RYm5xSsE25gkOYBS5NNn8jCy:fAKnZuGacPHVJhm54yd+Nni
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01fe5f1b5a477e27a83d690f698d3d19_JaffaCakes118
Files
-
01fe5f1b5a477e27a83d690f698d3d19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE