Behavioral task
behavioral1
Sample
14f4266dc4b97bedf3bbbf49c74b94e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14f4266dc4b97bedf3bbbf49c74b94e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14f4266dc4b97bedf3bbbf49c74b94e5_JaffaCakes118
-
Size
821KB
-
MD5
14f4266dc4b97bedf3bbbf49c74b94e5
-
SHA1
2e891aa44b7aea63d8906b09842a6833fb2c8e09
-
SHA256
daf250d93b2202265ece5829f6c2566e0ca5513e2f23e2fe926b8b5a054802d5
-
SHA512
da949d55aa009c5d5a0caf41d35710e159ca52352ba3e5e57c91e660bd5965dba45500ca58a77929c7ca9a098fa112549b297b373c00a78672e69178bafb544a
-
SSDEEP
12288:jt0VPFfsKAkrbPlXhHANUTNqjHANUTN7NUTw:SFksb1AL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f4266dc4b97bedf3bbbf49c74b94e5_JaffaCakes118
Files
-
14f4266dc4b97bedf3bbbf49c74b94e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE