Behavioral task
behavioral1
Sample
fb35ea99be18b0a6e83763da2b7f9e75_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fb35ea99be18b0a6e83763da2b7f9e75_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fb35ea99be18b0a6e83763da2b7f9e75_JaffaCakes118
-
Size
3.2MB
-
MD5
fb35ea99be18b0a6e83763da2b7f9e75
-
SHA1
3f0c60d3e4dd67fe22b88ad79cb754009efa20c4
-
SHA256
4a92c2d0d098892bffeee5eac28c24d91d695bd92de4956edb204bdaf14bf95d
-
SHA512
9566d0d039587a55b7d2d0d926d942110870fe2611d98bb61a734872730804adec0d675db48fff37815a0c901897ffaa736ea379b0a7546f14a0e4ac3195b2c4
-
SSDEEP
98304:mwy6g6qG9FKvO/6PcakchS87ccakciCsD0ZfzhcakchS87ccakcO:mB6g3K4dlhS87cdlhsQdlhS87cdlO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb35ea99be18b0a6e83763da2b7f9e75_JaffaCakes118
Files
-
fb35ea99be18b0a6e83763da2b7f9e75_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE