Behavioral task
behavioral1
Sample
fd551e03c0d8ddc78a270a4106b6caf5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd551e03c0d8ddc78a270a4106b6caf5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd551e03c0d8ddc78a270a4106b6caf5_JaffaCakes118
-
Size
1.1MB
-
MD5
fd551e03c0d8ddc78a270a4106b6caf5
-
SHA1
e32fcb94354d3aa55360df170e1e1c51dab9f419
-
SHA256
4158e14a57805d9356fdf7efb97700d4b18fef1cb5e50dd0f73c8aebfb25c335
-
SHA512
85b1215a54be41fcd552360ec520f9c9decfe58a8d99f5580f5f1823fefb333fec62b84d46efdf4af79e189d620f2aa37bd4f098ad201850e4f6543b3a11e06f
-
SSDEEP
24576:fWueUsaSo5n50bupZays46/up3s4uVfpZAkC+MmOCVIytiAN4:elItV5lZZsh/ICVfXWPmEylN4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd551e03c0d8ddc78a270a4106b6caf5_JaffaCakes118
Files
-
fd551e03c0d8ddc78a270a4106b6caf5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE