Behavioral task
behavioral1
Sample
fd1c844530b038cc8a2a8e66e46340e5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd1c844530b038cc8a2a8e66e46340e5_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd1c844530b038cc8a2a8e66e46340e5_JaffaCakes118
-
Size
270KB
-
MD5
fd1c844530b038cc8a2a8e66e46340e5
-
SHA1
2e9aa998513aad9d8b6fe1d702fec7c4adbc0de6
-
SHA256
536f33f1024c777391c110400164f62b3e5b1ec2a23b2381c3ef25c44cf894e4
-
SHA512
2fdce2716d80010a92908ea3c20ef9f276fb607722444466f11e44037f0fe681395287581df91e91398f6e775d775fed01079ba9e6418565cf3d528c2d651156
-
SSDEEP
6144:hGyGO6cAvtUzELBTvaSVSNcpVLFhTYYHVaeeuEPJn0YTRejRl4EV:h3+cegyc0SKhTS+cJn0SRtEV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd1c844530b038cc8a2a8e66e46340e5_JaffaCakes118
Files
-
fd1c844530b038cc8a2a8e66e46340e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE