Behavioral task
behavioral1
Sample
fca31714012555f6231bc8126d12cdd4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fca31714012555f6231bc8126d12cdd4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fca31714012555f6231bc8126d12cdd4_JaffaCakes118
-
Size
2.0MB
-
MD5
fca31714012555f6231bc8126d12cdd4
-
SHA1
ec574c1a2d449beff2082ed74fdd1743d856103a
-
SHA256
4d3c3d1642652b6ed238e71ce2ab6ec0b0a71a7d020288fa754ec49de32805cf
-
SHA512
a3846c1f2eab7abb351a60d6eb008fa17c61aa4eca155ac16d94711c6cb2f88e2455c469b918e6de373d90635c957fa37d6fffac1e51ad7fa7b9a4af9ad31fd6
-
SSDEEP
49152:/5Q7cbFsOY4A2Sn2PcN+9zWFULG+ntwJPUYOhRMAst05ddfcN+9zWFULG+:/SwbF/Y327kA9zyULG+twJMYOhfst0H9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fca31714012555f6231bc8126d12cdd4_JaffaCakes118
Files
-
fca31714012555f6231bc8126d12cdd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE