Behavioral task
behavioral1
Sample
fb460f50c3d0c471425ccd445fd8c062_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fb460f50c3d0c471425ccd445fd8c062_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb460f50c3d0c471425ccd445fd8c062_JaffaCakes118
-
Size
2.6MB
-
MD5
fb460f50c3d0c471425ccd445fd8c062
-
SHA1
535bda1d5fdf00ddaf83838da9930283479d135c
-
SHA256
2a033c85fe3511b497ec863b2d4764a4212e248917ffeff4f8eb67856b416d8e
-
SHA512
e509e0340a19086835c8df3522647f396c80aeb90e4b59cb00c7b4d6e5859184eb5b5bf7397c49b03b0c5bda4af22665220d2340a82f3da4181c7a12bdc72b99
-
SSDEEP
49152:X6Zkpr8dtUhmRcu3mIfzPydQYZ/WTvoCIEwS46j1ZrFCay3:qArupPfTrYxIwSdj3Q3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb460f50c3d0c471425ccd445fd8c062_JaffaCakes118
Files
-
fb460f50c3d0c471425ccd445fd8c062_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE