Behavioral task
behavioral1
Sample
fa7c16684e32fac79f8b5b878c2940fa_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fa7c16684e32fac79f8b5b878c2940fa_JaffaCakes118
-
Size
784KB
-
MD5
fa7c16684e32fac79f8b5b878c2940fa
-
SHA1
70476e07470cbe7e38abbd2fae9586536b49d6b2
-
SHA256
9f865caa23276261e2cb45d29a95cbd0bc133816c531ed090cc5d5899784ed5d
-
SHA512
1586bd3f2af32719a2992f93db8b9b073f016f3297198e98a5de0099144a3a594011ac3db282930a0cc6c3022fb11ab04bd1b36701c2fec4220eff6f5d198c8f
-
SSDEEP
24576:MmPJ/ps2PZVtAagIzDNQOd3mfy4xY/onI94hk4SmH4:Mmh/LtxXDLWU/S1k4R
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa7c16684e32fac79f8b5b878c2940fa_JaffaCakes118
Files
-
fa7c16684e32fac79f8b5b878c2940fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE