Behavioral task
behavioral1
Sample
fb34b7e8cb199949985f41c3c13d1c41_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb34b7e8cb199949985f41c3c13d1c41_JaffaCakes118
-
Size
20KB
-
MD5
fb34b7e8cb199949985f41c3c13d1c41
-
SHA1
c33bc0aeb1e2f2932ed8ab2dacd307d14093b919
-
SHA256
dfe2279e5bd23eefde74a3f544f9ec59da1774255e4d654dcacd88a9db11e6c8
-
SHA512
c41829bd2e3cd904d3948da1d28cb915c3f518979d29c3b54d75de70d146194963e77df8d8ba2ea4da24f625de1b4401efc0a7d3b63fcc5b596f03ce2dbbb22b
-
SSDEEP
384:R6BcLKespsKb+JOIWG+Xzm+32c90lLobahw80VyXiDjF06owVrO:sBcLKzIWG7w90RwMiO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb34b7e8cb199949985f41c3c13d1c41_JaffaCakes118
Files
-
fb34b7e8cb199949985f41c3c13d1c41_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE