Behavioral task
behavioral1
Sample
fe4c1a8c426ff848b84ace9a34c3af3a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe4c1a8c426ff848b84ace9a34c3af3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe4c1a8c426ff848b84ace9a34c3af3a_JaffaCakes118
-
Size
392KB
-
MD5
fe4c1a8c426ff848b84ace9a34c3af3a
-
SHA1
8b6313e7b94966d77f9b249e1c49b539cd6183a4
-
SHA256
8d34648416519905a5d714c249738cc44c9ef12aad24b85d63f9af246837cb3c
-
SHA512
cba8850677ab62921a360595450b74f4b2ac8ffc62d0aed16f149a1f589fcfee294d5aa91aa1bdf4885c059fc5ee2db506496256ff398e43fa35e1e900ee46a8
-
SSDEEP
12288:qcbvS+ScjNJcMjrkzg2MDk1isKMJim4Pm1hFgWohLiUsoXYW30FsE0fG:I/1wJkFsE0e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4c1a8c426ff848b84ace9a34c3af3a_JaffaCakes118
Files
-
fe4c1a8c426ff848b84ace9a34c3af3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE