Behavioral task
behavioral1
Sample
fab82a86293c5c1c87a13a50d3d2e547_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fab82a86293c5c1c87a13a50d3d2e547_JaffaCakes118
-
Size
515KB
-
MD5
fab82a86293c5c1c87a13a50d3d2e547
-
SHA1
dcc211d40d40d913323726f2610488ad0adf0456
-
SHA256
9097896ce14f3cbd8c258bb6a19fbefcf6e076e9cba518f146f19495e0a3de1b
-
SHA512
bc59dcc44db6ad4793b7a5b6eff32d0c0ec0e09ca38b9bd24063a88181be44f6567a44ee537f1f7dbd831f6be9b687f45769695b8b0360d8d2189a1d2319ab01
-
SSDEEP
12288:j8Nwrl4PWGXK0Pmg4Wo8r7S4/GLPeTqqy/toS:j8Oryna0P/q4/+eTqB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab82a86293c5c1c87a13a50d3d2e547_JaffaCakes118
Files
-
fab82a86293c5c1c87a13a50d3d2e547_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 492KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE