Behavioral task
behavioral1
Sample
fd7c653ae1b37b14b8a1c8e46c322f4d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd7c653ae1b37b14b8a1c8e46c322f4d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fd7c653ae1b37b14b8a1c8e46c322f4d_JaffaCakes118
-
Size
1.5MB
-
MD5
fd7c653ae1b37b14b8a1c8e46c322f4d
-
SHA1
46d2fe68fb251896670f8b96e976514d8d463597
-
SHA256
c0182d9f222ee7c127cf4d8b30e0a82409ea916d004d2bf9b3ed287746335f62
-
SHA512
a77e66f0c50909c484130fdfc0a931c6c4c7b76f72c243281099e4896c91b433bfa7cfefd57fe9359b4e7dce16d594ede66351392f1a589ba1dfc76a5a38c5d5
-
SSDEEP
24576:hVG+aX1mLZzrhqApvcjukL2N3I5hC2TH5tY9NlqMcjukL2Y:hVG+w1mLpr4ApvcakLWqhC2TH5t8Nlqz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7c653ae1b37b14b8a1c8e46c322f4d_JaffaCakes118
Files
-
fd7c653ae1b37b14b8a1c8e46c322f4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE