Behavioral task
behavioral1
Sample
fe519b455c9839c0d4359ef298d1e0ca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe519b455c9839c0d4359ef298d1e0ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe519b455c9839c0d4359ef298d1e0ca_JaffaCakes118
-
Size
5KB
-
MD5
fe519b455c9839c0d4359ef298d1e0ca
-
SHA1
3c04b5c35888f43001edd6f0f626693a29c97fee
-
SHA256
143aa52b53e43e072239e7420868e166ddf3373f484eb59217b84d91e9767499
-
SHA512
37a8cfe0e5c219e464725a283aa57d6e3a7790e2ac55c66e81d8134de7913ebb53eca8cb0ff2a53b7ec1dc24745a04e03cc2ff61c61b3fd8195fa4d61610d29e
-
SSDEEP
96:86zsZw47V84OOIJeazSoOlNx6yMrICnhUcHXBQsOHyl9hYNV11/XIJYI:3sZw4M7eaylv6y4RJ3BQDyBYNV11/XkF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe519b455c9839c0d4359ef298d1e0ca_JaffaCakes118
Files
-
fe519b455c9839c0d4359ef298d1e0ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE