Behavioral task
behavioral1
Sample
fbbcceef524fb8f8e354e027319bf938_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fbbcceef524fb8f8e354e027319bf938_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbbcceef524fb8f8e354e027319bf938_JaffaCakes118
-
Size
2KB
-
MD5
fbbcceef524fb8f8e354e027319bf938
-
SHA1
6cc0af61f193966235f6454951e157b2dad39fa1
-
SHA256
d5fc832f58fea9a63ba4c708bed54715f5bfdcb2cc0b792a7cc517e4f518086d
-
SHA512
fe63eb87cc46c522ace0008f16ce879dd23443fd03a60653daa1b9efc282e62ad40cc0e0bf15036c424cc471792f662bceaa062440960cc9e5dda5a995347041
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbbcceef524fb8f8e354e027319bf938_JaffaCakes118
Files
-
fbbcceef524fb8f8e354e027319bf938_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE