Behavioral task
behavioral1
Sample
fc5159572a20f92605675713832b22ee_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc5159572a20f92605675713832b22ee_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc5159572a20f92605675713832b22ee_JaffaCakes118
-
Size
74KB
-
MD5
fc5159572a20f92605675713832b22ee
-
SHA1
72f06c08081f9f44deb3634c692ce33bb6f62ab5
-
SHA256
556340b29c06feea2fa3cc6a9a23694ef8e10067b0a3c0f7b7e01e073c0d3a66
-
SHA512
25669b79bc87b8421e0dc39a172724d72ba3cacbc5bf0f1f2ccd6e2e4c3b4db6c93b353301b103f58a8c4d653843b6d6a855a2e9fa1d867639981d379ee16e2d
-
SSDEEP
1536:+/J8drnV5aIKQnvNLBPCC33o4yKILK9/H7H0mLUrL24UJC6+PFd:k6rnV5aIHFdPCC33o4yKILK9/H7LUrLP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5159572a20f92605675713832b22ee_JaffaCakes118
Files
-
fc5159572a20f92605675713832b22ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE