Behavioral task
behavioral1
Sample
fdf386474ea3e33946c1bc25151245f0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdf386474ea3e33946c1bc25151245f0_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fdf386474ea3e33946c1bc25151245f0_JaffaCakes118
-
Size
3.9MB
-
MD5
fdf386474ea3e33946c1bc25151245f0
-
SHA1
2a17285c3eae17f6216033e74c7f8e6570f008c9
-
SHA256
0df352aa767e044154a57bea910e5d2d094ae8a2c6a3ec5bc8273e6f5ef4ce4a
-
SHA512
f4d1dd60d9a064f8d8598161f1035e0beb42a100dd8423b36786ab76a0437e3a4e2892c27683c7c91fa1031d17d53b464d996fc4ab2e54e00a299b8955631e2c
-
SSDEEP
98304:txYMaUy11ED2i7D3xkOxYwpKq3w3sTAmeMKxCD2i7D3xkOxYwpKKKdcGVJX1T1w4:LY/vsh7FkNqKOw3IAmXK8h7FkNqKKKdL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf386474ea3e33946c1bc25151245f0_JaffaCakes118
Files
-
fdf386474ea3e33946c1bc25151245f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE