Behavioral task
behavioral1
Sample
fd052326dd07ad45fb125048a4475812_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd052326dd07ad45fb125048a4475812_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd052326dd07ad45fb125048a4475812_JaffaCakes118
-
Size
137KB
-
MD5
fd052326dd07ad45fb125048a4475812
-
SHA1
099fd04820f614e87fddc3a413996261012afd73
-
SHA256
c227a5498b49f41f91f6559e6f6d14713b0c7a550613fd34c6134c1fa5b09929
-
SHA512
eea67154422f98cfc2568da4d5f3518d937d161bd80953d787c43e461c1b41060a1e63af844e5cc27c5c4c5c37691d2b1e795a2d98cf9586b2a6eef597b79055
-
SSDEEP
1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W6:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd052326dd07ad45fb125048a4475812_JaffaCakes118
Files
-
fd052326dd07ad45fb125048a4475812_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE