Behavioral task
behavioral1
Sample
fb06a813b70de89f5089addc69f70de2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb06a813b70de89f5089addc69f70de2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb06a813b70de89f5089addc69f70de2_JaffaCakes118
-
Size
5KB
-
MD5
fb06a813b70de89f5089addc69f70de2
-
SHA1
eece99da29c3a5997403fc64b702ea37051c394c
-
SHA256
90f338166a15e56c5ec345ee45b39aecbc2215174aa35d2e28ab78075e2026e3
-
SHA512
abaead0be1725d38e1ac8e4d63b08cf0898c2c9a093aa22b7dfaa7907d76faf566707f1bf70e605906f60302551dda5931934791ded255b297f8102ecce6492f
-
SSDEEP
96:my9fhcMDph5mgoyRP7hQKUnYS51/D/ITX7PJPn8ksGFXby6WzP0Jnml+h/S:vfXuylOKUnY61/D/ITX7PF8TG1y6kP0K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb06a813b70de89f5089addc69f70de2_JaffaCakes118
Files
-
fb06a813b70de89f5089addc69f70de2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE