Behavioral task
behavioral1
Sample
fcea026f30d0c9776d276ab93cbc4098_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcea026f30d0c9776d276ab93cbc4098_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fcea026f30d0c9776d276ab93cbc4098_JaffaCakes118
-
Size
5.1MB
-
MD5
fcea026f30d0c9776d276ab93cbc4098
-
SHA1
7b29bc5405d38d60bab42df49c786ae211c4e918
-
SHA256
72b0611511140edb1ed3d83058e60dcd73d976d926b04846b4d11d5dd0b22de0
-
SHA512
213c191ece760fdf741a465ee7062be6802b6f2bedcfd6ac7a087eecaf277e69ccd25702c4b6fdfc413495b1aa0e8896b762ba7dd30663b58b2958dc7bb80a75
-
SSDEEP
49152:kmGx89VvMEX19s/d1ZlrI7oMJBeZ4ay3Y4UhpHWaOe98+Qbo6xIhDGII8JUJvruj:hQ1SkG3YTpjgmJCF9BI3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcea026f30d0c9776d276ab93cbc4098_JaffaCakes118
Files
-
fcea026f30d0c9776d276ab93cbc4098_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE