Behavioral task
behavioral1
Sample
bf62a30869d83aa1e2faf63216c0c7b8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf62a30869d83aa1e2faf63216c0c7b8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bf62a30869d83aa1e2faf63216c0c7b8_JaffaCakes118
-
Size
3.7MB
-
MD5
bf62a30869d83aa1e2faf63216c0c7b8
-
SHA1
bd156db9b03b99d3dc54f8ea2c7ea00286490f55
-
SHA256
e0746b90daaf74152abd20d620e682beb84ae45bbc456a9023ee5c6d8c1dc08b
-
SHA512
ec9d8a3b01182e1a19179c16c2f4b6b8672bad967451c6e606eb0fd7a0ef958c13ee9f2013c860b5256809abd1fe67bea0ca42d77e617bace9879d3d2a832827
-
SSDEEP
98304:uAYRWJ3guzrI7fiL9tgZZEkpDwyPVg1b3QOQYRitH0RSXJgGCnUMW8BMHDWXu:uPWLr3gzNPPVg1brJRitJ5gHD7m9
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource bf62a30869d83aa1e2faf63216c0c7b8_JaffaCakes118
Files
-
bf62a30869d83aa1e2faf63216c0c7b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE