Behavioral task
behavioral1
Sample
fcbcf40db6dbe1f6a0dbbade66fc9bfe_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcbcf40db6dbe1f6a0dbbade66fc9bfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcbcf40db6dbe1f6a0dbbade66fc9bfe_JaffaCakes118
-
Size
465KB
-
MD5
fcbcf40db6dbe1f6a0dbbade66fc9bfe
-
SHA1
db635f97ce0d652a54e5264e9c2dc583157be03b
-
SHA256
972333f966b9a5a3c913e2a6b18e53e9e48e285ca8581e549d44178b579b70a0
-
SHA512
e20e39e8525a19559c821b3b61ae81a0a4f766686b93cd4222efe4fcc9d9fda7d2aee00fa170df4c88390028825a96de826f321187ddd1f4c6c19067ce9d149f
-
SSDEEP
12288:OATEooMqY+w/QS6un1bs/958FftY02JJ31:tT9CY+w/QSVn2158B6Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbcf40db6dbe1f6a0dbbade66fc9bfe_JaffaCakes118
Files
-
fcbcf40db6dbe1f6a0dbbade66fc9bfe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE