Behavioral task
behavioral1
Sample
fd0e5d3fd2162f870a6daa8a54eb34bb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd0e5d3fd2162f870a6daa8a54eb34bb_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd0e5d3fd2162f870a6daa8a54eb34bb_JaffaCakes118
-
Size
5.1MB
-
MD5
fd0e5d3fd2162f870a6daa8a54eb34bb
-
SHA1
fb2e712378d34949ec25f561f1a73b38383531c1
-
SHA256
a32465deb81e5ad428d1aa726b12298e37506525c3c75c945489f021c12b1f59
-
SHA512
b6b4bbb36d2887e181eb12b599831e4acd288b41beae06d44fbe41a62dfac5b04822b509fe9279f6d9fff6cec9a96082f42b3ec0a9575198a0dd227d0516f9a2
-
SSDEEP
49152:5fmshlIYhBc4ooZzG+L7XqawClk6Ee/Tuy6IJOM91ay3ICtZ6jOCGuncn5TQNHPa:5uaeY55XxwClf17nA83tCxN9Bs1HB3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd0e5d3fd2162f870a6daa8a54eb34bb_JaffaCakes118
Files
-
fd0e5d3fd2162f870a6daa8a54eb34bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE