Behavioral task
behavioral1
Sample
fb85ae9fb1521f5ab2b7d37eaed89370_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb85ae9fb1521f5ab2b7d37eaed89370_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb85ae9fb1521f5ab2b7d37eaed89370_JaffaCakes118
-
Size
35KB
-
MD5
fb85ae9fb1521f5ab2b7d37eaed89370
-
SHA1
6ddbc7cd98a77922254f3a3e5d1abedb8b046736
-
SHA256
98270ebc8ddc7a8ad5a6a632a8c72770e6f608438cfb4abf4a69dbc0fe3fd429
-
SHA512
c2bbcc9e36fa69096372ce20ef4ea9e7cf053d4f9fc4782aa336807e8543fa9550c34d42cad6870174eeecbeabd505a3a68bec62f579a1b26039f3f916584e70
-
SSDEEP
768:VbIRyVttWCpqby4Q7uTcvq8i7rEo/sC50o8:V09Cp6y5dSIess05
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb85ae9fb1521f5ab2b7d37eaed89370_JaffaCakes118
Files
-
fb85ae9fb1521f5ab2b7d37eaed89370_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
QQFs Size: - Virtual size: 464KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QQFs Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE