Behavioral task
behavioral1
Sample
fb1b9c9c3f59947bf64f59208c78f841_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb1b9c9c3f59947bf64f59208c78f841_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb1b9c9c3f59947bf64f59208c78f841_JaffaCakes118
-
Size
2.5MB
-
MD5
fb1b9c9c3f59947bf64f59208c78f841
-
SHA1
396d7964f7900187397aec4aff830b9c19d21045
-
SHA256
62e3375a2bf0bd2e92868ad994640040cbf4a2adbb3aa00fde917a002e56b468
-
SHA512
c8f97dd001a8c97965ed1733e821a159847853d86e0e8bcd3d7df3d75fb8542a217f68312c1f36af9c90ef27eddfd9db022300f73a11f8d5c4a86d15bb878b63
-
SSDEEP
49152:LV7uNRXNxf2RAR5FeA6w9sNBk9/fw2BwfmM0fWhbuRKwpB:J4R9x1PsNi9XwgwfoeH
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb1b9c9c3f59947bf64f59208c78f841_JaffaCakes118
Files
-
fb1b9c9c3f59947bf64f59208c78f841_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE