Behavioral task
behavioral1
Sample
fb812932ddf30c1d84f69a1fbd6cd733_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb812932ddf30c1d84f69a1fbd6cd733_JaffaCakes118
-
Size
10KB
-
MD5
fb812932ddf30c1d84f69a1fbd6cd733
-
SHA1
ea50cd0e8c7a689357061ae925f80522e93da1d0
-
SHA256
387961f044979d0689cf0d91cce930178f602fd1694d763c5635cd1045cdd9d4
-
SHA512
6d7b3e1dab46464c237e5cce64aaba690aaf87e6f61699b1babe47e090c02c5b78b956d0a91efcb3095141f5b860f99049862b5d0dc5ce776b56d46bb1b96937
-
SSDEEP
192:VJmYOAGiEJi2YDssIhOjPaNIomwnHxFaNJhLkwcud2DH9VwGfctdk:OYhGiR2Uss3PRoRaNJawcudoD7Uo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb812932ddf30c1d84f69a1fbd6cd733_JaffaCakes118
Files
-
fb812932ddf30c1d84f69a1fbd6cd733_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE