Behavioral task
behavioral1
Sample
fb33d7a3289526b0b978600d637dc122_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb33d7a3289526b0b978600d637dc122_JaffaCakes118
-
Size
6KB
-
MD5
fb33d7a3289526b0b978600d637dc122
-
SHA1
00408f2bbb43e998bffc4d7845621d868b28144e
-
SHA256
2a3a15d85a2bda17f44a368a609889e0f37c927833a337a48adc24aefc77f40a
-
SHA512
364a19a42dbd15f251b0ed39db088923d839e1ca8a2f3a4293a98dd9c83baa25d8b087952e1fcd5da9fd599c7979c483995c008da9742379287c7f52f3558ac6
-
SSDEEP
96:gD38mXyyOy4cWQtOB/oA73xg1A74gAnBvG5lGh9+CBZ:Kpg2WQtaQA73Z4ggvG5lGDn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb33d7a3289526b0b978600d637dc122_JaffaCakes118
Files
-
fb33d7a3289526b0b978600d637dc122_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE