Behavioral task
behavioral1
Sample
fe12e4c64a5160264c1fa873c94c10f5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fe12e4c64a5160264c1fa873c94c10f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe12e4c64a5160264c1fa873c94c10f5_JaffaCakes118
-
Size
5KB
-
MD5
fe12e4c64a5160264c1fa873c94c10f5
-
SHA1
95f08d9000e326f0bf36131cd1d8d0f79bc9e820
-
SHA256
57f94d5452b2afd5b2db12fa667f32fefb540a2a48fdc22cb8e2944c18d53dd2
-
SHA512
640f4dca06d8fa8e7508bd18e9224ec961ee3f398ad40d2d1f71cca08ae750aa342ed6256544f374df91665fd701d63b48f26fb97df9703527cd07f92534f9b2
-
SSDEEP
96:PLpNKtcwMDsbMuLwqChH+nr225ItXFC7N5A5jjAIsNQ+uu4meeHRwGmHqKOX:DOSp7sChepoC7A5jjMGu4qwnq1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe12e4c64a5160264c1fa873c94c10f5_JaffaCakes118
Files
-
fe12e4c64a5160264c1fa873c94c10f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE