Behavioral task
behavioral1
Sample
fb17b1d1451be3b17d41de3b1a34c6e7_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fb17b1d1451be3b17d41de3b1a34c6e7_JaffaCakes118
-
Size
488KB
-
MD5
fb17b1d1451be3b17d41de3b1a34c6e7
-
SHA1
023d5cced270d73a59b726d99dd17928e624656d
-
SHA256
de4829ccee7efea8ebf556a62b4c354157f22faa3c90307e2efbd02a123aea14
-
SHA512
863350213609af303acb829a40b6d95b37d299267eed9606631a8b62f8d8bd51991a78e0404880b02adfde868e88e91b69abdd07e7b1c36fa24ed51e0d7a556f
-
SSDEEP
6144:GKkxK10/d0HV76C6iHYlIZGy2zcSnlmRri+1Xr8BmvNWwW6bvFp8s1TiuZJRiwPe:tsmZkYgI7xwBmVWwHbvBi6F7+7pD
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb17b1d1451be3b17d41de3b1a34c6e7_JaffaCakes118
Files
-
fb17b1d1451be3b17d41de3b1a34c6e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE