Behavioral task
behavioral1
Sample
feb53673d09d63335d709cb44d29d36e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
feb53673d09d63335d709cb44d29d36e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
feb53673d09d63335d709cb44d29d36e_JaffaCakes118
-
Size
62KB
-
MD5
feb53673d09d63335d709cb44d29d36e
-
SHA1
3e4ba96700b0f4967272f8be96ea8d3297250d21
-
SHA256
2cd2d655810a6c93823ad0a5a295988e23eb620998f309ee5f2cf93fea49c4e2
-
SHA512
c43e95bb0810740c30ea7e726b8381dbbc7adf607decbdfad04bb13d9ecd11b3c3c876235dd794f0632ccffc39eb7119fe3bc07ab8f887bf2e187658902f8102
-
SSDEEP
1536:90G2i5yRvhfPuKp67ZYgY7gkz4sFvZrxgSCh9Z49p1P:90G2ii5PuI6GEa4sFhPCXO1P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb53673d09d63335d709cb44d29d36e_JaffaCakes118
Files
-
feb53673d09d63335d709cb44d29d36e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE