Behavioral task
behavioral1
Sample
faf4925358520b918793d69af5e4297c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
faf4925358520b918793d69af5e4297c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
faf4925358520b918793d69af5e4297c_JaffaCakes118
-
Size
2.6MB
-
MD5
faf4925358520b918793d69af5e4297c
-
SHA1
92ae8bab87f71ce190a8d187bab56e44ac56a393
-
SHA256
9023199f5ba0f7786b32ee907e8ded28580be9e7c3fa493bdab909f5a6592b59
-
SHA512
357890c418da06dc8ec3b7caf527054ce5f3fe801c01c60bc54e042610e8478ebc6eea279947c8fbd4bc0383f580f40ea743d5c67f75f27b27009393565bbf7d
-
SSDEEP
49152:Cpe9V2TNnaypil9wJg7buak6T8bhrgjjEOay3:125nw4aTerLG3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf4925358520b918793d69af5e4297c_JaffaCakes118
Files
-
faf4925358520b918793d69af5e4297c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE