Behavioral task
behavioral1
Sample
fa27adda31a0e0e7cd21f3473a7dccca_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fa27adda31a0e0e7cd21f3473a7dccca_JaffaCakes118
-
Size
784KB
-
MD5
fa27adda31a0e0e7cd21f3473a7dccca
-
SHA1
e0a6b545605dafe552664cbd7bc3c470ac7de6d2
-
SHA256
e16c9f94b67f2fa4eefb8c8ade36067deaf49c304962edad45fe4405862dbf11
-
SHA512
235b7ae5959922667bb310a16ad20b303630288e94b9d010ff5f3aef4cef0a0b28065a658350431d321f57f925b7109396a924801c37ab2b8c8245322c145873
-
SSDEEP
12288:cA31QmDudF8CzjdAF5T0MXlLGghG65E3xtbAx7/fPtgG0jRsOoUNElWd7o7Wjh5y:JRuPhjaFV0WG6E3xxAx7HGVAWKWjjy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa27adda31a0e0e7cd21f3473a7dccca_JaffaCakes118
Files
-
fa27adda31a0e0e7cd21f3473a7dccca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE