Behavioral task
behavioral1
Sample
fd5d406ceb47135f1136c23217b5418f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd5d406ceb47135f1136c23217b5418f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd5d406ceb47135f1136c23217b5418f_JaffaCakes118
-
Size
1.9MB
-
MD5
fd5d406ceb47135f1136c23217b5418f
-
SHA1
48d8d9f9dcbd5adc6ce6b9787ac266a1f16b9ce6
-
SHA256
141b0f0ba0a46d573e9380fd52defd449264179e51e85dcb6ea8097c185c9df1
-
SHA512
9627bf429f03b819ccd723414e52e14c7c70ba4adc690449f955da17446de5aa1a935b125799742fcee2358171c95b1c22e5b26b314f0f142c870062d14b3863
-
SSDEEP
49152:CUna1lCHzwTqOptdKsttu/+i+de6rYXcpBgC6wOqOX3FSvDcaEg:CaawVOptdKstM2i+drYspuC6wOhX3FkF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd5d406ceb47135f1136c23217b5418f_JaffaCakes118
Files
-
fd5d406ceb47135f1136c23217b5418f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE