Behavioral task
behavioral1
Sample
fd0a6691ecd95a07fda757e130ef3e7f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd0a6691ecd95a07fda757e130ef3e7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd0a6691ecd95a07fda757e130ef3e7f_JaffaCakes118
-
Size
203KB
-
MD5
fd0a6691ecd95a07fda757e130ef3e7f
-
SHA1
ede5ea8a57182cf80bb85919aa8a746451a3be46
-
SHA256
d4221e66372b09c966155a8d682cd95dfd7c4a7cf1516380b12ea1f77e9d66f6
-
SHA512
216ede5409b9ef20559b633f0221ce452e524d4f5a8bd44dee2bf3499bb74e70811b594f0582c91b6efe844c22df87de420b48d2a2f54288492c5b5150737387
-
SSDEEP
3072:XnSvhAyRTXdxh0v80uoh6lUI0JGP1hGtx2EZP32tiD2do8DkCfugKkwrTz4cH:dy7xG88h1zmGtQuP3I1BDHakyk0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd0a6691ecd95a07fda757e130ef3e7f_JaffaCakes118
Files
-
fd0a6691ecd95a07fda757e130ef3e7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE