Behavioral task
behavioral1
Sample
faec3e0461310f3270a4a153562fac52_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
faec3e0461310f3270a4a153562fac52_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
faec3e0461310f3270a4a153562fac52_JaffaCakes118
-
Size
11KB
-
MD5
faec3e0461310f3270a4a153562fac52
-
SHA1
55ce9e6f60e6c89ace852f9a6bbbcadde6a2bf88
-
SHA256
bd5687ebff6783cb3e5360df03d6159e693a2bc7de201737b4a7c240096bf202
-
SHA512
9ecd1c735b85caec5019d13b0aea3b7282bb6572d987c742b7577ba6dca71a67ed1477589eadc6d8ee6a561d7eabc9a70f8bfb62b84b83614bd3ae36dcbfcc07
-
SSDEEP
192:WwJ/QvKHXRfAcaNgiTHV++c8In0eNFJqqkUkK0tXNeWE:h3RHa2iT1+70eBYXjU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faec3e0461310f3270a4a153562fac52_JaffaCakes118
Files
-
faec3e0461310f3270a4a153562fac52_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Sections
UPX0 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE