Behavioral task
behavioral1
Sample
fac4f945777f5a11fa133ba6db5c8fed_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fac4f945777f5a11fa133ba6db5c8fed_JaffaCakes118
-
Size
784KB
-
MD5
fac4f945777f5a11fa133ba6db5c8fed
-
SHA1
d9d424a68efa6aec2104fad107ed64303e1a7e98
-
SHA256
55b59643e74e9e0cd88ceb0702d3cce117dfb6ef412b0f2a58dfa312c162e493
-
SHA512
09b539efdc6b27d22265d9c94da4a7b90e4c574c3459f0a9f9ff250c2cc7a456342d3a0952844d27964258bfac31d986df7668ffe6218793889774aa191bc30a
-
SSDEEP
12288:yc5TFiHzp+Gq9q41kgdu27At69Wf1l7lT/RY69yyHVRehseNSTcR:y8TgGEUdwFR/y69ykSsqSTI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac4f945777f5a11fa133ba6db5c8fed_JaffaCakes118
Files
-
fac4f945777f5a11fa133ba6db5c8fed_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE