Behavioral task
behavioral1
Sample
fa0b10385a4f7044e18c2e00b4b4475b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fa0b10385a4f7044e18c2e00b4b4475b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa0b10385a4f7044e18c2e00b4b4475b_JaffaCakes118
-
Size
2.0MB
-
MD5
fa0b10385a4f7044e18c2e00b4b4475b
-
SHA1
71072b5560ff91771f33b9f501a24d76a576034c
-
SHA256
15b7585de940a776edbff81d7bd351382f5b67596dba7d351894ad9fd972f281
-
SHA512
4a89d05670d7630c87fcf100e4b4b0a735110476750a9a715a2d240b8fbdb072bf5c6c337a3b02820f42f02904546fda82db9665501d23b9aa62b99310660548
-
SSDEEP
49152:hEBNDP6yp2X2wf/4RcakLz0ibq6yqhkWvJ7dcmq7S32d8lN9cakLz0ibq6yqh:m9Cq2Xj4RcakcibiqhkWvJ7dcmq7S32v
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa0b10385a4f7044e18c2e00b4b4475b_JaffaCakes118
Files
-
fa0b10385a4f7044e18c2e00b4b4475b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE