Behavioral task
behavioral1
Sample
fcda5e448ff4787c3312e960108eca29_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcda5e448ff4787c3312e960108eca29_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fcda5e448ff4787c3312e960108eca29_JaffaCakes118
-
Size
475KB
-
MD5
fcda5e448ff4787c3312e960108eca29
-
SHA1
8818bb09c6b2208abc81e63c707ca3c44ea4f892
-
SHA256
c453bdeda810168bc8c542f746ef8de19ca82f1c18c47b895d1c651a64aef247
-
SHA512
0770b3325e2a4a21b4217bdbba31e0870a313be45300f86599f0b364056910659ce18a238b7c2163a0503e9ab3b0b3409f17cc853789f85e23146c3f8bd406ec
-
SSDEEP
6144:bbJ9CpC9kEtHOwMHb3LwUnR1RPIUwxhiVUSPcFd/wiaGJ5U:PCqpMnR1RPIUwyVUSeKiTJa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcda5e448ff4787c3312e960108eca29_JaffaCakes118
Files
-
fcda5e448ff4787c3312e960108eca29_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE