Behavioral task
behavioral1
Sample
fa4977dcf63ee0dff901ff88f8af3404_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fa4977dcf63ee0dff901ff88f8af3404_JaffaCakes118
-
Size
28KB
-
MD5
fa4977dcf63ee0dff901ff88f8af3404
-
SHA1
9acde7fb34012019b1134415dc995ba3737ac992
-
SHA256
efc26b9379ec3c87e483542d90af7fecbdf61a502b1f5e2595ff0d240767ec82
-
SHA512
1c2facc43d4ef9fcd301c95b893b835e667eeda707b18db58d673cdd740f9681cd04a835a1a8e87ea2aa144d99dfdf9b6c02b154544d3e64b34362d4627f4eb7
-
SSDEEP
384:sQWJfae4rE8YG5V1M/H5YksjlF6RTz60jGd0n/v0jPiE8nb/mFeklzp+wWXWoQ:EfaeNrGf1G5YkWP6RYqndE8nb4lzc1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4977dcf63ee0dff901ff88f8af3404_JaffaCakes118
Files
-
fa4977dcf63ee0dff901ff88f8af3404_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE