Behavioral task
behavioral1
Sample
fb0cdc0e70efeab807d4a41834c8fe47_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb0cdc0e70efeab807d4a41834c8fe47_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb0cdc0e70efeab807d4a41834c8fe47_JaffaCakes118
-
Size
2.0MB
-
MD5
fb0cdc0e70efeab807d4a41834c8fe47
-
SHA1
0cc9298ea07991bf07c74367d7ebbc32a366a4da
-
SHA256
b7abfe7633f75fe6f920a7a41a409e9b9b3f9aa60ba89b69e273efa90221a582
-
SHA512
d178fe6e5b5407d5a7d68c914b0f235267e2bbbf658e53fb661e1215bb0b7a50ab19fbe7ec87c199f41d1e769306d36a66382f55a4354a911a691b4ff2506f0d
-
SSDEEP
49152:C40cwLALXzz+3NF5cN+9zWFULG+m7YnNkJ10LAdbjLcN+9zWFULG+:C40tLALXzz+3b6A9zyULG+m7SkJ100dP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0cdc0e70efeab807d4a41834c8fe47_JaffaCakes118
Files
-
fb0cdc0e70efeab807d4a41834c8fe47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE