Behavioral task
behavioral1
Sample
faf8f3caf7a4a9f044081b90cbc01854_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
faf8f3caf7a4a9f044081b90cbc01854_JaffaCakes118
-
Size
784KB
-
MD5
faf8f3caf7a4a9f044081b90cbc01854
-
SHA1
97023b444e8a6b294956bade615b28c195b8ef1e
-
SHA256
2dd67bcd4478d9c7abb03ec3e73fb44948e09947bb231549ead10ee59313b391
-
SHA512
d577d309e1f0958b47e79621737b31c272781ece30ad9e485e82e70cbefa0d4b94993c2b9e4a4ace776b62036fc3fbde810ae578c8d20417eff9bf1b8348926f
-
SSDEEP
12288:gfh/fvRCmMeOdgQLLgC7Q9YIhHRdKxj8n4ckQS82GIB2bRVzgzsFPJtpN:Y/fvRCVL6eIPdKB1ckQS8ZDzgkPJ3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf8f3caf7a4a9f044081b90cbc01854_JaffaCakes118
Files
-
faf8f3caf7a4a9f044081b90cbc01854_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE