Behavioral task
behavioral1
Sample
fc7fdc87af9a361a9cd5160a4467bf05_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc7fdc87af9a361a9cd5160a4467bf05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc7fdc87af9a361a9cd5160a4467bf05_JaffaCakes118
-
Size
557KB
-
MD5
fc7fdc87af9a361a9cd5160a4467bf05
-
SHA1
739658f9e95d6f00c819e013a50b1ec78e930acc
-
SHA256
e40dd1a0bd78cf0dd59ff95e78c6de8ce4bfff346d5d58f050d694dccded4313
-
SHA512
2e2a9c3c49bf7a32a5aed072a43a5500e0665cd5cc9462026f2ae79b9a45f6ebef223b4de833bb5621e5a0c6c59e3c21d27d37a21fcc2d19b4633cda3f597e22
-
SSDEEP
12288:OiSBYmhlvYbgwiM5Bf1vqSh3RWANixzpP8ZHh6me99hRE9J2hOlK0M5Fv3:OhXybgtMfEzBYyv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc7fdc87af9a361a9cd5160a4467bf05_JaffaCakes118
Files
-
fc7fdc87af9a361a9cd5160a4467bf05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE