Behavioral task
behavioral1
Sample
fa767018b5af4cfa168a2ba14060017f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa767018b5af4cfa168a2ba14060017f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa767018b5af4cfa168a2ba14060017f_JaffaCakes118
-
Size
54KB
-
MD5
fa767018b5af4cfa168a2ba14060017f
-
SHA1
e56090493761ed295c989a5001a2fa8d8a061223
-
SHA256
043ce1f2648e3b9d0e7c3f72e7dd44b40197542d031d5dec9b61d41d3aa0b99f
-
SHA512
554dff2f162593a55b9c0bf0d4daf2676e77bc814298e3376b6d64e30d46af917ea347c6faa257c2dfb2e9436b740ef60ec9bb62efcc673fc15f904fc393ee34
-
SSDEEP
1536:nex6LMuKaMthkF/i8xspEDd2/09aUe+qMaF:nbb3zKeR2Ye+qMG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa767018b5af4cfa168a2ba14060017f_JaffaCakes118
Files
-
fa767018b5af4cfa168a2ba14060017f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE