Behavioral task
behavioral1
Sample
fa0f6f25729edebe8f69ff6bba5d44ef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa0f6f25729edebe8f69ff6bba5d44ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa0f6f25729edebe8f69ff6bba5d44ef_JaffaCakes118
-
Size
11KB
-
MD5
fa0f6f25729edebe8f69ff6bba5d44ef
-
SHA1
d754887b2d5f73dce86466bd2412dc74105b1130
-
SHA256
5aeb3f7ff1c1d9212dde07c5aa1e1d1f7b55a9c371c99efa5285102d2240535c
-
SHA512
4a8a773c7ed95457413244876238d453f0f4d4c890ec2caf6360a528597e25d068e0aadc93db249cc7bfe6c403ab1303e7535d46a5aad1a334162e9de307f7e9
-
SSDEEP
192:IGzeHpI6WbJv/HZU7TIHH5d7NsiPKfzAsqKJZ3SuOQyl7nS8pzkVYRC57EIMzp8A:IGKHpIBv/HG7TIH6vVLryZFpzkVj57EF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa0f6f25729edebe8f69ff6bba5d44ef_JaffaCakes118
Files
-
fa0f6f25729edebe8f69ff6bba5d44ef_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 156KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE