Behavioral task
behavioral1
Sample
fb84f5d13ad482d206487abb8c4c412e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb84f5d13ad482d206487abb8c4c412e_JaffaCakes118
-
Size
226KB
-
MD5
fb84f5d13ad482d206487abb8c4c412e
-
SHA1
406efd66dcf271c10228be133d2ab08bb463ba2c
-
SHA256
70f00e96039e66f9b804a044acf2702da831604491df502a11a50c9d20e4dd8b
-
SHA512
fe5b83a2385205438601d90faaecaef100537f5856d983e98c646498b965ad500f5b24891a4f6fd5550bdb66afbd98aeb0a27ef0d92b16216fea6d389a03e698
-
SSDEEP
3072:dpVxYDSf7jZbCsImZthQWPlRjsDkI/d49/vVS04ijG9oaPoM0QJGk87iq:dpVT5pUWPlRjsIn9lS7kooaPASGqq
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb84f5d13ad482d206487abb8c4c412e_JaffaCakes118
Files
-
fb84f5d13ad482d206487abb8c4c412e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ