Behavioral task
behavioral1
Sample
fa6bc8c8601a0576604caaf69967f1d1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa6bc8c8601a0576604caaf69967f1d1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa6bc8c8601a0576604caaf69967f1d1_JaffaCakes118
-
Size
168KB
-
MD5
fa6bc8c8601a0576604caaf69967f1d1
-
SHA1
dc23ce1b8bcf0430130e4d94ee336b78f60ef405
-
SHA256
dac036de58e52bd2dff0817d7a45bd0b622112758c446db54542e80329aa5374
-
SHA512
21f27e217411be5ee324deb0968d72b98446ee4d10f62f60829a8151fdce03f858ffb06f7b2dbe13f3c01bdd65a060f2b473136710f69bba1f74b3fafcb94dd1
-
SSDEEP
3072:swwcwLBQQIIEyFmc8BZniEC+kL62L+1KWqt7tR5OTNL5TE1ZDUI/GWRo2rXfZ+:vj44IEyFBInpCV62ayxr5ORdTE1dUI+h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa6bc8c8601a0576604caaf69967f1d1_JaffaCakes118
Files
-
fa6bc8c8601a0576604caaf69967f1d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE