Behavioral task
behavioral1
Sample
fa21a95dd96b84042d00c19db8c7c7a9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fa21a95dd96b84042d00c19db8c7c7a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa21a95dd96b84042d00c19db8c7c7a9_JaffaCakes118
-
Size
3KB
-
MD5
fa21a95dd96b84042d00c19db8c7c7a9
-
SHA1
85e00e70fd1d576a796838adb4bb65cd30987320
-
SHA256
65f92ff59ac134ea436b9135baa67907d6f3e21b21457c0e8499c3f6dc1a38a9
-
SHA512
a0f66b370dfd69640706d36b2d3a9ed4942e8204a64151faa46a377729e047e64fc3acf2c908c6b27013a0b00dcc26aca56aef6d00e698790d221c47a7104dfb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa21a95dd96b84042d00c19db8c7c7a9_JaffaCakes118
Files
-
fa21a95dd96b84042d00c19db8c7c7a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 54.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE