Behavioral task
behavioral1
Sample
fb7b374e0aab006b5bd21869282e62c2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb7b374e0aab006b5bd21869282e62c2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fb7b374e0aab006b5bd21869282e62c2_JaffaCakes118
-
Size
221KB
-
MD5
fb7b374e0aab006b5bd21869282e62c2
-
SHA1
1c31b8f082a1cf95c6fb90ebcd3e01fbe656fc43
-
SHA256
a81f0e9a52d28be5a28686f39ee027ef637e55a40b15c5a00752b8266d2de2e4
-
SHA512
b25f6038df9a21dd25edad3d77ddef1e26b8e92924ab4e2ebc54631da1167783cfe99e2c15294a1f7f5fc23845581633039a59f5ca982808aff3650a09fe8d29
-
SSDEEP
6144:FnOplbB6uy20+Su+DsmsDvLKDsYoWionib:svbW2yIDvuAY89
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb7b374e0aab006b5bd21869282e62c2_JaffaCakes118
Files
-
fb7b374e0aab006b5bd21869282e62c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE