Behavioral task
behavioral1
Sample
fd004d7163bb90588c80d66e33bdc2f9_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fd004d7163bb90588c80d66e33bdc2f9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd004d7163bb90588c80d66e33bdc2f9_JaffaCakes118
-
Size
133KB
-
MD5
fd004d7163bb90588c80d66e33bdc2f9
-
SHA1
e79fa9edd610464ebb9c567d86a774b64ec912df
-
SHA256
00b2de6fc9ac243760541e5d49c5816d65e6944ce29c8a3428eab1407cb38fb4
-
SHA512
7bb26d6d38ae3281cb3f183e094bfc8776f9a8b1213b036bc72e859de9e47709cb86e6ac7b1ad6d544ec6039f1be228c923cdb6167dc3c85a1b6099bc3b48b6d
-
SSDEEP
3072:Umg8Fr/G28X4ATBj0BU4zW3pYmbvRdzm+2eP+u3OI/t9P30P7Q:UmRFqbcXqYm/zm+2ePHlP30P7Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd004d7163bb90588c80d66e33bdc2f9_JaffaCakes118
Files
-
fd004d7163bb90588c80d66e33bdc2f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE