Behavioral task
behavioral1
Sample
fded61a8bfd4d0a3281ebe178625eb47_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fded61a8bfd4d0a3281ebe178625eb47_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fded61a8bfd4d0a3281ebe178625eb47_JaffaCakes118
-
Size
859KB
-
MD5
fded61a8bfd4d0a3281ebe178625eb47
-
SHA1
d6a773bacdd652c98ab5d10e867a30fe18aa73fc
-
SHA256
b5e8ec771fe763d2dfe0fae2908e586791443f489334262cb65ba96b5e0c88c1
-
SHA512
77687f14046c12d254c2aaea94dba2f37c2eee456ab8a98e70c4db484d387493d54b6894bf44fcc3fc6efe021711b64128584a91f0d97be731f0f6be2edda71f
-
SSDEEP
24576:498tdIXuQbOEy+toB3rtaDsa8kjs19b8q1irB:4kdSuQbO/+to9YA/bBcd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fded61a8bfd4d0a3281ebe178625eb47_JaffaCakes118
Files
-
fded61a8bfd4d0a3281ebe178625eb47_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 841KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE