Behavioral task
behavioral1
Sample
fb21281fad02be8b3298e3f9682411c9_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fb21281fad02be8b3298e3f9682411c9_JaffaCakes118
-
Size
784KB
-
MD5
fb21281fad02be8b3298e3f9682411c9
-
SHA1
dd588c458f6916523f6995682e8a7d9a49a5f029
-
SHA256
a8e4577b0b0f4a02246bd6197c8391ed198def4f8bef3cfc6a44810366079f4c
-
SHA512
13ffb741d4b0f39d4cc79c5b240e8e2057ab143c1eaf232a70a13d16a50892e4d77249e95a7d4983d56d2289e59278da6fb09e7e9cf2df74ad691bc85d578c46
-
SSDEEP
12288:OX706zX8CMRpB3KVKe/CsnSHbAqf9a4JCmQZmeujN3TPEcKDX0gc5qTxYIkSZT5L:+7BGYViAqf9anmQZ5uj1Ph+i8pk4TN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb21281fad02be8b3298e3f9682411c9_JaffaCakes118
Files
-
fb21281fad02be8b3298e3f9682411c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE