Behavioral task
behavioral1
Sample
fdee1f6186a7f875f6018d6a5d343a6c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdee1f6186a7f875f6018d6a5d343a6c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdee1f6186a7f875f6018d6a5d343a6c_JaffaCakes118
-
Size
213KB
-
MD5
fdee1f6186a7f875f6018d6a5d343a6c
-
SHA1
5ba81f4a0d3f52c19f457a63efccd5ca61833907
-
SHA256
b929c59c40295681b0ab959b1b28a13bad138800aa506d973cd70ba95ded2b65
-
SHA512
6a8758db53a5406e904d1c6a573b8a97fe9ee32d587450427ca7b14e35bc431292ed8fcfd45923fdd5ecf68818c9cde59f8ed5427ee46d90f09a3e1841c4983b
-
SSDEEP
6144:c06HNp9yoLxUAjcCnm/pe9WLQy0lS5Mbvh1qAFfA/2X5YAH0pY:gNp9JjcZegL/cS5SJ1qAFl5vI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdee1f6186a7f875f6018d6a5d343a6c_JaffaCakes118
Files
-
fdee1f6186a7f875f6018d6a5d343a6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 206KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE