Behavioral task
behavioral1
Sample
fdecd2c8a92c95c4c015e8369bd4c5c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdecd2c8a92c95c4c015e8369bd4c5c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdecd2c8a92c95c4c015e8369bd4c5c2_JaffaCakes118
-
Size
234KB
-
MD5
fdecd2c8a92c95c4c015e8369bd4c5c2
-
SHA1
67aede6afc019230a6329108c5a6e17b3dd42781
-
SHA256
37a3284303a59504d10c46b2d2117b7486ad4b8fe675a426ce1de0a4b13aa2b5
-
SHA512
9e2f80c6b193b45d4186f2ed4f3b17d9364fe1d37ab6bf103ad88a82d9938725b6fb62911539a1f69271fcc6bf16c37134d61c65dd2cc9f7d3463b3b9ce7baca
-
SSDEEP
3072:mJKRAat1A0tEqkvOVzHTVMyEuSvEJVHtXs2Oa3rzs+out5:mJqt1ARCW+oS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdecd2c8a92c95c4c015e8369bd4c5c2_JaffaCakes118
Files
-
fdecd2c8a92c95c4c015e8369bd4c5c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE