Behavioral task
behavioral1
Sample
fcc251cd335d06803e108816602bfc57_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcc251cd335d06803e108816602bfc57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcc251cd335d06803e108816602bfc57_JaffaCakes118
-
Size
8.4MB
-
MD5
fcc251cd335d06803e108816602bfc57
-
SHA1
151e757ab73af9f0b953879b79d67b796bbb1440
-
SHA256
0b44d1c66b51bcda1ea75231310170995afe3c0bf7274642c3f6a576e7fdcb55
-
SHA512
14e345763b02579d33ce5918a0ab6082cc8b28f9504ff6ea90ecf6c14c89ec31b2deeaef19e42f01c0798f54fca1afe694e345575450e2da3b7dc0b9028cfca8
-
SSDEEP
196608:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHpLG8doQpu8rVtxQuULG8doQaIMrdfehQc:i7effIPEsy58doQaTzwZ8Jq3ELhf8cHW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc251cd335d06803e108816602bfc57_JaffaCakes118
Files
-
fcc251cd335d06803e108816602bfc57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE