Behavioral task
behavioral1
Sample
fdbead3dd1971515bb8b195085724a2d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdbead3dd1971515bb8b195085724a2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdbead3dd1971515bb8b195085724a2d_JaffaCakes118
-
Size
6KB
-
MD5
fdbead3dd1971515bb8b195085724a2d
-
SHA1
ef0b42fc7a55793bb5c441d42ebeb15161d9c606
-
SHA256
4899ac1db992a46ef5464d0ce9d89b3c9856c9245d58282462fc5a5a48890099
-
SHA512
fcffe91f6397367edc744e7390ba128d60be984283600cdce00b42d9c26b9684d9d5599eb399b1801c491bb9052872100c9958c7f74498306c470536c0672575
-
SSDEEP
192:s6FMeU+oIV1FFSbO2nkfcQUM3oWUcYe346/Glu/YI:lFzU+oAnSi23zM3N46/GY/j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdbead3dd1971515bb8b195085724a2d_JaffaCakes118
Files
-
fdbead3dd1971515bb8b195085724a2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE