Behavioral task
behavioral1
Sample
fa2931e4bee1d1b0a7f87b2ff5ca2170_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa2931e4bee1d1b0a7f87b2ff5ca2170_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa2931e4bee1d1b0a7f87b2ff5ca2170_JaffaCakes118
-
Size
133KB
-
MD5
fa2931e4bee1d1b0a7f87b2ff5ca2170
-
SHA1
6ae20025d4d27063b1d8a56fec96a83561bcf2a3
-
SHA256
4d6bc68adbc0257d8ff597de79261899d39879f398589c18cbd7bfb681685f33
-
SHA512
42f496d72d7ce4d13eb932ca29ac6f23652f31ad2b3a985444a6573f89f250f524b76052c21ba0775b1c21e1e3e72e0e5879d6d441972037b82b5d3c9300be91
-
SSDEEP
3072:jlMTXSirlm0ScKgYEJitoD6WWIRbiLFDcDOF0OGLE5eMdxkEwGBTUQ:jCTp0oKiJDFWIRbiLiaCAFEQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa2931e4bee1d1b0a7f87b2ff5ca2170_JaffaCakes118
Files
-
fa2931e4bee1d1b0a7f87b2ff5ca2170_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE