Behavioral task
behavioral1
Sample
fba51d90ef6f36759db1e66897a13995_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fba51d90ef6f36759db1e66897a13995_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fba51d90ef6f36759db1e66897a13995_JaffaCakes118
-
Size
133KB
-
MD5
fba51d90ef6f36759db1e66897a13995
-
SHA1
c45ccf7f0aee0a963a1838e558f5b8c521e62b4a
-
SHA256
a31f3307e08c1bd84a909b0a43c9ebbd13fd19fa0b1b5254ccd49d3c3158669c
-
SHA512
b9a9cb304c30dea5bb166d289dbfaf2edbb3058b17b7e5d3b1189da0fbd091f2544c98336058ac88ded34f0a6656cc903a43fe140d169c337ad85fbe59c7f850
-
SSDEEP
3072:910W+v7szECRrkcKT9jAa5MgbYd9TbMSFVy1o/HBlYQ:z0WLEI1KSPfTFVy1ovBKQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fba51d90ef6f36759db1e66897a13995_JaffaCakes118
Files
-
fba51d90ef6f36759db1e66897a13995_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE