Behavioral task
behavioral1
Sample
fafb3e4fd8038d97a8a79f13aebb320e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fafb3e4fd8038d97a8a79f13aebb320e_JaffaCakes118
-
Size
58KB
-
MD5
fafb3e4fd8038d97a8a79f13aebb320e
-
SHA1
b2ab086f76095a6c44854826ae28a56b4526938b
-
SHA256
b6d07f12d40ac658f85a69a683af3626bf4a94e83f87620c6aadeac2f3744ceb
-
SHA512
d11cf177e23f6d9d09726af5d9046390a664c7dba7ca6d68b9392cd49f3f9ab95096c259354b7e21f70c585cc53a04952c90c4a721afaef1320683caf1966d21
-
SSDEEP
1536:luBji2lUWxsXdn0x34+H4+6a37JfLti+zfTpMGpw5GLC:gprNKdne34+H4pYJfBbtMGu5GL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafb3e4fd8038d97a8a79f13aebb320e_JaffaCakes118
Files
-
fafb3e4fd8038d97a8a79f13aebb320e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE