Behavioral task
behavioral1
Sample
fcb0db4baf5845b8d3357a45d3a5edef_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcb0db4baf5845b8d3357a45d3a5edef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcb0db4baf5845b8d3357a45d3a5edef_JaffaCakes118
-
Size
41KB
-
MD5
fcb0db4baf5845b8d3357a45d3a5edef
-
SHA1
608a37fc9f55b530b932cf11ea00388b27393901
-
SHA256
0396e08e65430ce9e8fa31cf01f6b0bf6ce2903f0c85352e168091954200c17a
-
SHA512
2136f9e7cae9cd5b25b1f26e100d7a83c4f7092d8517c8d141a6734ed4b166d0820722ca66e8ebfa49e1db4f66835cc4ad95485cb2d56888fcba48c9e00c90a9
-
SSDEEP
768:6FbJvR/sy9+0O7ScXtPMs70yfBEL/S57HA2ecuAlp3b20sOLx8He/TnbcuyD7U:6lf99+p79h70yfKS+cuAlL1xNTnouy8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb0db4baf5845b8d3357a45d3a5edef_JaffaCakes118
Files
-
fcb0db4baf5845b8d3357a45d3a5edef_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE