Behavioral task
behavioral1
Sample
fa931c7c9237b768c592a7907ef069d7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fa931c7c9237b768c592a7907ef069d7_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fa931c7c9237b768c592a7907ef069d7_JaffaCakes118
-
Size
59KB
-
MD5
fa931c7c9237b768c592a7907ef069d7
-
SHA1
70ccae53e35d19901fd5445a334b2984134aa4bd
-
SHA256
6267013507c7e9da9117d912603030d295a8c5a65326c35fd762a9639980228b
-
SHA512
d744169be91211a313c312074a8b827b6ff38e89c893354433610bae3b9de59749d46d39d0f84d786ef985cec2ba748820de635598d913ec7b62e5114df64dfe
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFGocAX3LKew369lp2z3m:SKcR4mjD9r823FHKcR4mjD9r823FH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa931c7c9237b768c592a7907ef069d7_JaffaCakes118
Files
-
fa931c7c9237b768c592a7907ef069d7_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE