Behavioral task
behavioral1
Sample
fd59d70476cd7ec0741bcef0c9b8a5b4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd59d70476cd7ec0741bcef0c9b8a5b4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd59d70476cd7ec0741bcef0c9b8a5b4_JaffaCakes118
-
Size
7.0MB
-
MD5
fd59d70476cd7ec0741bcef0c9b8a5b4
-
SHA1
8723af00a246228f481add6a077b554c54788f71
-
SHA256
1df4b76fd4771672a1da8a044d6c771cdf7cf54d5cedb7d898de7c3e5205829a
-
SHA512
b7207a6bc025468bab1633feecf56c98efb5aa9a0de4d4072fb6c31d808c1e3d469733f6dc4ee3e5255a15baac4da6fbe1321794d0140f5f06302f31f1798863
-
SSDEEP
196608:i7effIPEsy58doQaTxLhQyZbIly38doQalArdfehQM2gsyVCQlXlAryfEQuMozk4:i7effIPEsy58doQaTxLhQyZbIly38doI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd59d70476cd7ec0741bcef0c9b8a5b4_JaffaCakes118
Files
-
fd59d70476cd7ec0741bcef0c9b8a5b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE