Behavioral task
behavioral1
Sample
fb4c84e9abcfaaebf77781b001415e29_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fb4c84e9abcfaaebf77781b001415e29_JaffaCakes118
-
Size
448KB
-
MD5
fb4c84e9abcfaaebf77781b001415e29
-
SHA1
6bb7e7d6606feda835fa53e4256b869652594901
-
SHA256
438302451ed29bfb611ed7d44c0b0faac3b1cb2b9fc63de2803be52b79ef6a17
-
SHA512
e77d5aabe401200544c68d238add9a9b0df57a5618e8054370f0d7cda69a1a656a374e6e0f5bf39d075a7a2e4fc6bb61f4b2d8df57ecccf98214fa540191fdf7
-
SSDEEP
6144:wiJg1Yfh7LF6CsTpa7zkhaCIacbHVJ/LXfQIdpyqTVzdzcKlLyrvmezV:wiJgUZkM7oh9Iacb1xDptLdyKe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb4c84e9abcfaaebf77781b001415e29_JaffaCakes118
Files
-
fb4c84e9abcfaaebf77781b001415e29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE