Behavioral task
behavioral1
Sample
fb72fac3f81c7545bd89ee7bef9d5be7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb72fac3f81c7545bd89ee7bef9d5be7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fb72fac3f81c7545bd89ee7bef9d5be7_JaffaCakes118
-
Size
1019KB
-
MD5
fb72fac3f81c7545bd89ee7bef9d5be7
-
SHA1
cbe7d8ecaa07fb8e0230d39b3d6084ccbc5c1fcb
-
SHA256
2be39260cef37c8581c891863687cb3f1b22cc0aa43436cf3c0621c6cdf84da5
-
SHA512
1de590f15e93f81af1c69ffade2a554230b2a54bb9162944106217642ce79d9ea42d79f67ee35ddd8495c61063c8fc3d1f84db88b8049aeb87c099d33c95dbfc
-
SSDEEP
24576:3ieVHnPj15KsppZM14zSj1xXtaqRDrbZV2V6p/2Q:ye9j15K0p24E1B0yz2m2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb72fac3f81c7545bd89ee7bef9d5be7_JaffaCakes118
Files
-
fb72fac3f81c7545bd89ee7bef9d5be7_JaffaCakes118.exe windows:4 windows x86 arch:x86
46444be09c7bd9854fac64f896f7f0be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellAboutW
StrRChrIW
kernel32
CreatePipe
TerminateProcess
VirtualProtect
Sections
UPX0 Size: - Virtual size: 9.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 918KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ