Behavioral task
behavioral1
Sample
fadb53f570320aca960ebcfd84ff57b0_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fadb53f570320aca960ebcfd84ff57b0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fadb53f570320aca960ebcfd84ff57b0_JaffaCakes118
-
Size
133KB
-
MD5
fadb53f570320aca960ebcfd84ff57b0
-
SHA1
bb7171f14c4741f3d708bd5f6a6bfbe6b43374f5
-
SHA256
697799c992ce2725efc8458eb1b5547471c1fa434db5054b1ed31e43091cf917
-
SHA512
2d91e00a3329dfc54aa5e27ff20e8b19f1dba5cf053fbe71c52ab69041c9a7d7831b92297535596f478dc7ac6e302dd99854219d81d96bec6c1b602c0ee4957a
-
SSDEEP
3072:RYLk12Cf0nYKsCOa1r0ihG/5a+Wihn9BcYatVIvQ:wCfgFsCOa1AiM/5a4h3brvQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fadb53f570320aca960ebcfd84ff57b0_JaffaCakes118
Files
-
fadb53f570320aca960ebcfd84ff57b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE