Behavioral task
behavioral1
Sample
fbf7ecd02a314c66264cd0204565cf1b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fbf7ecd02a314c66264cd0204565cf1b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fbf7ecd02a314c66264cd0204565cf1b_JaffaCakes118
-
Size
563KB
-
MD5
fbf7ecd02a314c66264cd0204565cf1b
-
SHA1
8be5f9af62f6d9dfa600dabd8ac4a6a6733d042e
-
SHA256
1bb02e6b72939dec459e93d4520c9e1093acfba7ac155025c62fb4b2f2acf4a4
-
SHA512
9a6ac32643a61206c5604bee7ba41a845dd2a67649971d8a00412785479919e7f295e6cc2d6da54ca8e7d82ef2a2682ccfdbed837bbc2ba26e527709fe5e1d5e
-
SSDEEP
12288:T/wpNY/3QMEXSrB9koyE4eb3oSLbRFyTZxx1J:TovtPXSrB9F4ebVzyTZxx1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf7ecd02a314c66264cd0204565cf1b_JaffaCakes118
Files
-
fbf7ecd02a314c66264cd0204565cf1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 924KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE