Behavioral task
behavioral1
Sample
fb2182ed8a5299b8023e9d64383c7795_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb2182ed8a5299b8023e9d64383c7795_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
fb2182ed8a5299b8023e9d64383c7795_JaffaCakes118
-
Size
223KB
-
MD5
fb2182ed8a5299b8023e9d64383c7795
-
SHA1
0a0c38bb3c6cfed6d75446ad409f866356114962
-
SHA256
50e6053b994b6358c5fcc3ba4ec431458a4875e7629af24e8b9c84ab5825ef84
-
SHA512
80c313ec80b097e0b3aed2b16800afbaa35323cfd592ea02d389b5843f8dc01dd7fcfd4b33a305decd87b2b3eb5312988b53a74d2709f20eb2cd214db55011bf
-
SSDEEP
3072:bXuW/8LACBJR/jCt/K5VlnHGwKTiSWhYZESSS1wbIV7pWIxqcKO7cLfAzqbwpVjD:bebAeX4/K5RthYZl1Omdqc3QLadbfoS1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb2182ed8a5299b8023e9d64383c7795_JaffaCakes118
Files
-
fb2182ed8a5299b8023e9d64383c7795_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE