Behavioral task
behavioral1
Sample
bf9dc8db0165921edc1d807c7a9c2f0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf9dc8db0165921edc1d807c7a9c2f0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bf9dc8db0165921edc1d807c7a9c2f0c_JaffaCakes118
-
Size
2.4MB
-
MD5
bf9dc8db0165921edc1d807c7a9c2f0c
-
SHA1
8716b9bc59310f06fa6baeb66d9ac81105bf1fd8
-
SHA256
b35d667f0c6c68ac88e531d3201596b828bdeee630e0d9baf0f4ab75b11c396d
-
SHA512
fee3208c521fcf0dd4b5d4024e2f7cfbbb936019af6ce8a5796566e3d90593b5ac0c7b6f3ae82af61e822a46e3f9c03ae0b8179a6080adc15c38971bbbeedc2e
-
SSDEEP
49152:vzdZ+u2j/t7uJMveYvtYPuQ80K4GTg2o4Y6WC1pO1MLqBrY2:vzdZ+XJ+MveYmPuJyeEV69pbmD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf9dc8db0165921edc1d807c7a9c2f0c_JaffaCakes118
Files
-
bf9dc8db0165921edc1d807c7a9c2f0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE