Behavioral task
behavioral1
Sample
fd2c1ce60971a8bd19155e904a54f522_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd2c1ce60971a8bd19155e904a54f522_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd2c1ce60971a8bd19155e904a54f522_JaffaCakes118
-
Size
75KB
-
MD5
fd2c1ce60971a8bd19155e904a54f522
-
SHA1
ad2c7dc6bae06230c58278bbf43cc0ba6e1e8a81
-
SHA256
5f6c98d99fdbef9c78682e0f06eca48abc3ba02681124147226dbc502b79d439
-
SHA512
9ba9c6225829ab76dd8bac1f01b0c3a729e2554f008dca93184c81463d0cc589ba0aae3b503b311ec727bce72c997253522dbef1c7233d57ebbb4452da0b68cd
-
SSDEEP
768:ka0GGLD4dYIyG+omOqRWj74ohO4Jdh1tGazzGOpEiNB6vDwmoOo8xnOs0q1f:ymYIyG+omK4N4JdBRJEiNB6DTox8xqU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd2c1ce60971a8bd19155e904a54f522_JaffaCakes118
Files
-
fd2c1ce60971a8bd19155e904a54f522_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE