Behavioral task
behavioral1
Sample
fa66d82468e0715e79e5a1ade4dc38e2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa66d82468e0715e79e5a1ade4dc38e2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa66d82468e0715e79e5a1ade4dc38e2_JaffaCakes118
-
Size
5KB
-
MD5
fa66d82468e0715e79e5a1ade4dc38e2
-
SHA1
23a3c0a68f12701561b8f3a079811e216e719af1
-
SHA256
96c10f8a840b772491b117b666e2ed77391991deab6204577f3ce3da06d0a9ae
-
SHA512
02148045b1537e1b60e3125e09827b2faaa1268f0f4fa7b25cac93ae8b9d66f494db9699a7afdf24136c07df389d454a24e2bc3b375973e126682fa5af1dcb34
-
SSDEEP
96:sJ+pHGkMDSEdaV76IP1al8YHQURECE7hS/d7B+27N87bAnMPPGDTXSwfrEtIJs:sJeQJ8V2U1alrQkECE7odB+yN87DeXFw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa66d82468e0715e79e5a1ade4dc38e2_JaffaCakes118
Files
-
fa66d82468e0715e79e5a1ade4dc38e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE