Behavioral task
behavioral1
Sample
fe9e78b4868ab76106f4451d58429a5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe9e78b4868ab76106f4451d58429a5b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe9e78b4868ab76106f4451d58429a5b_JaffaCakes118
-
Size
3.0MB
-
MD5
fe9e78b4868ab76106f4451d58429a5b
-
SHA1
79c9a1dad9ae2b61c11edb132a75b9a31a361c71
-
SHA256
7538da18cd522b56ef6a877d1f7eb778878ee6d0ca7fcb07a7923adbb5f7ed40
-
SHA512
30d4b73f96ba4d1e93168cf702910612fbe5b974adee11df3198063ef3f1dda7daf910fb664b564cab627dc966df552dc93b5956472b00203b7a2e4a9b636ba8
-
SSDEEP
1536:0DK8Fef+IvWruJx46wshHY62pB1oAl718qn+oEywcDn6TNLsLEnouy8:0Dy+IvWylpIB7lxjn7wq6xwL0out
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe9e78b4868ab76106f4451d58429a5b_JaffaCakes118
Files
-
fe9e78b4868ab76106f4451d58429a5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE