Behavioral task
behavioral1
Sample
fd025c28f2d3239c148446b6b1a91108_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd025c28f2d3239c148446b6b1a91108_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd025c28f2d3239c148446b6b1a91108_JaffaCakes118
-
Size
543KB
-
MD5
fd025c28f2d3239c148446b6b1a91108
-
SHA1
08d423b71ad68ddc3ed4fba5e71fdfe0ef991a26
-
SHA256
5600e67bcb814bad5401c35f47097ca7864f96dedc85bb786958cda72b786fcf
-
SHA512
5f2f9d223f5893ec05b29ecb04588f25f588d915682853ef1cd856324ed8e9d3511bd253ab048c96f42f08c8ef6a9a4b14b24e94fac50884aaf4e540dbca4e3f
-
SSDEEP
12288:SDg5Un0hXDle43v+q5iSsBi7PXqa9TUuKX+/dQ:SwTle43Gqfaa9UUd
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd025c28f2d3239c148446b6b1a91108_JaffaCakes118
Files
-
fd025c28f2d3239c148446b6b1a91108_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE