Behavioral task
behavioral1
Sample
fc6b5e1c368d3b48b54f50ae030a3ff5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc6b5e1c368d3b48b54f50ae030a3ff5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc6b5e1c368d3b48b54f50ae030a3ff5_JaffaCakes118
-
Size
75KB
-
MD5
fc6b5e1c368d3b48b54f50ae030a3ff5
-
SHA1
1065dae5cc44eaebb2a7b23fff486d26fdaf336a
-
SHA256
41da507df6d3596b674bd764bbe9e2a79dfead8f740a504d1b0a844946bb339c
-
SHA512
4a855fac2a883eb4b560795ba65abad7540c4469304a9de7a2fb2792120ac147afc30859868d7ceedcbe4bf8043872fc9ca80d5e684a29a6f56225759e0696f3
-
SSDEEP
1536:5uERoyiKgr7OmfHK7SD80Q2VuUyWs8ZGkBrZZb7UDAePlizvR9Gnouy8xMJ:5X2ymrnqeD8YJymZ93ZbVzj2outxMJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc6b5e1c368d3b48b54f50ae030a3ff5_JaffaCakes118
Files
-
fc6b5e1c368d3b48b54f50ae030a3ff5_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE