Behavioral task
behavioral1
Sample
fd444e11b86bf64a8dfa63ae4d70db19_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd444e11b86bf64a8dfa63ae4d70db19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd444e11b86bf64a8dfa63ae4d70db19_JaffaCakes118
-
Size
7KB
-
MD5
fd444e11b86bf64a8dfa63ae4d70db19
-
SHA1
2c9f61d6d14fb11708af7b57ab6a32471a889d14
-
SHA256
2e62ff1f3950150f2101f9cd269554f442de9488aeb30071a7ecead64e4a0faa
-
SHA512
3c7f8e6317d033026cbbd1776afd93448edde0df3315a9740c77b7e7e0a45cd19a20616b6877708e3ce484ae45d6c03c104bd120fb67278c2add062749a2a59b
-
SSDEEP
192:Zon0+OWZHqKTS5F9THN6Aio0pZyiByxVECYlAwucK3WqpBO:ZB0ZHE5F9NEnLCYlA5cKi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd444e11b86bf64a8dfa63ae4d70db19_JaffaCakes118
Files
-
fd444e11b86bf64a8dfa63ae4d70db19_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE