Behavioral task
behavioral1
Sample
fdd42fefc76d339247cef1e562163a73_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fdd42fefc76d339247cef1e562163a73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdd42fefc76d339247cef1e562163a73_JaffaCakes118
-
Size
942KB
-
MD5
fdd42fefc76d339247cef1e562163a73
-
SHA1
4ef93331d17e412d788f046e865fee92e5437502
-
SHA256
fa949b775b348eeae6729ebf7331c210f09426de43e6f562e5c04802e9ccba91
-
SHA512
5085a5e25fe1395c6ccd5703cc41c2e4d790d810a324a8cbef2e44699a04c2147ca07943d34e5d5c7cf74249f7f6875887b1d78d33413d4089e3706a8e7a0705
-
SSDEEP
24576:hhq/e4HZRq22bSJJu//uyuzMZbENAxC0sXQZi:hhqvZRq7uy//kKbSMfsA0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdd42fefc76d339247cef1e562163a73_JaffaCakes118
Files
-
fdd42fefc76d339247cef1e562163a73_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 939KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE