Behavioral task
behavioral1
Sample
fbf76faaf56b02b6970e335c3a540b7d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbf76faaf56b02b6970e335c3a540b7d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbf76faaf56b02b6970e335c3a540b7d_JaffaCakes118
-
Size
13.3MB
-
MD5
fbf76faaf56b02b6970e335c3a540b7d
-
SHA1
4cf6ea7c8e60f49ac94ed18ec40f63f7c86dce5e
-
SHA256
c2a63c5d2a62d5e355a22a9c7e688117251f4d50c948a7692b245d3c744044ed
-
SHA512
eb0b194001b364e4af88d83bd1783aaff324368c7b365cd1937af9c7c20cea8ae07de604c8eba2d3e5637954a6d9da37c5770f87f84bb1dc489f54a2455c9d1a
-
SSDEEP
196608:NAfrMK0z50OJEzEuDTvnO5tQ3ovumrGXp661:NYYKXS1uDaOZmry6u
Malware Config
Signatures
-
XMRig Miner payload 1 IoCs
resource yara_rule sample xmrig -
Xmrig family
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf76faaf56b02b6970e335c3a540b7d_JaffaCakes118
Files
-
fbf76faaf56b02b6970e335c3a540b7d_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.extrel Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KO:RiB Size: 512B - Virtual size: 128B