scan
Behavioral task
behavioral1
Sample
fa0402418c7579886718a97da326ab03_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fa0402418c7579886718a97da326ab03_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa0402418c7579886718a97da326ab03_JaffaCakes118
-
Size
18KB
-
MD5
fa0402418c7579886718a97da326ab03
-
SHA1
d1ea72b42556af10a939819bb4d21d17a2f7936c
-
SHA256
aefd5558a94097941624bdc074a283deb099b17f3ac7f0ce8d7a6d5a360e41b9
-
SHA512
6d2e0bba1c434cd1549d3eaf2936675b0822a447ef5db315e311c82b505e4d3975b555abc7c0964333764541dc5a521a1ceb216eb1541e5bd063b57a38822f0c
-
SSDEEP
384:KAPDixReG0xWi7n6zFgKzND07xDfI0dkKGC0COVbtRsxdfU+yZg9et:KA+Rpyb6zWKzNDm1GCixyL7Uf
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa0402418c7579886718a97da326ab03_JaffaCakes118
Files
-
fa0402418c7579886718a97da326ab03_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE