Behavioral task
behavioral1
Sample
fae1f04f3f7d7ec47f5caaf86568a9d1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fae1f04f3f7d7ec47f5caaf86568a9d1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fae1f04f3f7d7ec47f5caaf86568a9d1_JaffaCakes118
-
Size
2.8MB
-
MD5
fae1f04f3f7d7ec47f5caaf86568a9d1
-
SHA1
fa73fffacc80f0c1222fccf319dcfa77e6ace8a4
-
SHA256
65efaaf5ea8bca0f193c372fb6091ba4c9debf8b7842aa959ad85f3ce383a0ac
-
SHA512
3ce054aa6e92c8050e97462ee2b862f7491fb35adfb0d674bec2afa089e431a693eb0f357e42a4b9615656c9b8df7beea1ec888aa7dff8eea6196d934bf9aebe
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHE6pQPxQ2JyP2r5mJV91S:SCqm2Jpr0nNM7Dus7Nx2kCqm2Jpr0nu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae1f04f3f7d7ec47f5caaf86568a9d1_JaffaCakes118
Files
-
fae1f04f3f7d7ec47f5caaf86568a9d1_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE