Behavioral task
behavioral1
Sample
fc818021b455326a5b6050af2c85fb5d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc818021b455326a5b6050af2c85fb5d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fc818021b455326a5b6050af2c85fb5d_JaffaCakes118
-
Size
10.7MB
-
MD5
fc818021b455326a5b6050af2c85fb5d
-
SHA1
ee83ae3e48232754af3ab904d55ebb3f47ab628d
-
SHA256
f3f51e4eb44359103458fefb33a6d4c4b6f61de6a4f30be043a07ca222655755
-
SHA512
00f7e7ee630422270a0e88e4020995aca34ba503c2ebed2863ee141d2411d15851e4d59ae0727ace6463486de5d694b58b8854fc2c82ae8b0fa342a0edcae069
-
SSDEEP
98304:7XPjXenW1NJ6GjKrZDlCO7EFY9J6GjKFfP8OjKpTpFJ6GjKrZDlCO7EFY9J6GjK:3Xr1/6FrZEmk46FFBjCp6FrZEmk46F
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc818021b455326a5b6050af2c85fb5d_JaffaCakes118
Files
-
fc818021b455326a5b6050af2c85fb5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE