Behavioral task
behavioral1
Sample
fdda064d3f63646465ae7bd29802f6e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fdda064d3f63646465ae7bd29802f6e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdda064d3f63646465ae7bd29802f6e1_JaffaCakes118
-
Size
97KB
-
MD5
fdda064d3f63646465ae7bd29802f6e1
-
SHA1
c5e6ddf2615491b664321fc368c4107ac61130f0
-
SHA256
3ea6607981e9e3e9de950a5fbc1305f7fe54ef7c570ecdc60fe089fd0e49da99
-
SHA512
2a40b679cbd68b5f41670efde0504242c9b56584fc750ef514ea8236e2d8d7281b7e4a6a51a69974427f0d6114e29e48b5af8af5fcc2e2367c8a8e2241408975
-
SSDEEP
3072:kGEcwMDemPKKVxQYQ4fGiaBR/Lh4r7B1LA6eAw+7F:xymiKVxWYr7Bd+2B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdda064d3f63646465ae7bd29802f6e1_JaffaCakes118
Files
-
fdda064d3f63646465ae7bd29802f6e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 646KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE