Behavioral task
behavioral1
Sample
fe5655cae12e62c38d5bb1871320faea_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fe5655cae12e62c38d5bb1871320faea_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fe5655cae12e62c38d5bb1871320faea_JaffaCakes118
-
Size
3.9MB
-
MD5
fe5655cae12e62c38d5bb1871320faea
-
SHA1
ca835c1df85457845fbaa7520e07c1476a5c42a6
-
SHA256
3be17ed9449e8e6f72e0ddcedc0b00638204c55c65c8c202286fbb1cb58fafb7
-
SHA512
63517027aa84d2e8fdc39001aba0b68d281342216114725c6dc05f79c814369ab58fc4fd2a250ff2e8fdaa0163d8550a4528d990ec0aee9496841fdd88439310
-
SSDEEP
98304:hwEbcEp1D2i7D3xkOxYwpKoTwr4ve44goD2i7D3xkOxYwpK0g0jAcL16D2i7D3x7:hwOHp1h7FkNqKo0rkOh7FkNqK0tAh7F7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5655cae12e62c38d5bb1871320faea_JaffaCakes118
Files
-
fe5655cae12e62c38d5bb1871320faea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE