Behavioral task
behavioral1
Sample
fdeee62a63b5e04bf88f90f7d2f85d63_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdeee62a63b5e04bf88f90f7d2f85d63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdeee62a63b5e04bf88f90f7d2f85d63_JaffaCakes118
-
Size
726KB
-
MD5
fdeee62a63b5e04bf88f90f7d2f85d63
-
SHA1
9413f5133973ef6f9392637c3f1ace7df9a8badb
-
SHA256
f2342532504a8513de565f3288f98b095c268313d2709890ab13b38671f86258
-
SHA512
9c5535ee1d8a5222f7ea0a28b16149a106cd8a524331ac4e7919c491a7580e31dedc4dc135947e5aa3d81e67c2c8162d1f73a39b406500e7e0c9a4f0185d9db1
-
SSDEEP
12288:mHqI5bOWXgO+gHEObNOhCQm6/4zmEzofUDaQTqFA3vh:BCOWRHEZjm6/4qVSzKUZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdeee62a63b5e04bf88f90f7d2f85d63_JaffaCakes118
Files
-
fdeee62a63b5e04bf88f90f7d2f85d63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE