Behavioral task
behavioral1
Sample
fabfce6674d6a6abf5cbe7306e95d243_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fabfce6674d6a6abf5cbe7306e95d243_JaffaCakes118
-
Size
123KB
-
MD5
fabfce6674d6a6abf5cbe7306e95d243
-
SHA1
890e3d7708197ddc9bff5aafc8fb2b19fe6e7e79
-
SHA256
c5b59e73c506e3a32be85828838a0f2ab6507ddd70df95320a57b954ba14fee5
-
SHA512
181a00b920ada594c22dd9726e6fe8bae8c9fe7d094a73ee57884037db5c59910264f9299af71eed78820a483c975f2257da4cddce910efb41567582b5887b9c
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsaJZ74:NVYrJrOSsRwcpnJZs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabfce6674d6a6abf5cbe7306e95d243_JaffaCakes118
Files
-
fabfce6674d6a6abf5cbe7306e95d243_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ