Behavioral task
behavioral1
Sample
fb71a5ca98bd642650e87c3fe250bb4e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb71a5ca98bd642650e87c3fe250bb4e_JaffaCakes118
-
Size
176KB
-
MD5
fb71a5ca98bd642650e87c3fe250bb4e
-
SHA1
8d62079194fa25d663ad24e323e2a519e136ae97
-
SHA256
5ffc54749abc7b1257609bcf34413e752a32a2a33bc4e0fead9810221c9c8d43
-
SHA512
a9d1df789a6a786f51406e1cfa8043e7dccf7f2ab51649b3e5a63d73f5bc33046706b38f7fa2bac5def148723e5c5a32252fd791433166c5a5e54f4a52656864
-
SSDEEP
3072:dI+YqxxPUhm3i3NEekup07eClffNVT6zQ4bj08YMO+Jc/VVIoYV0rTouh2BP:dIo7UhmSi5iU3DT6zQ4bjAnuSIohrToP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb71a5ca98bd642650e87c3fe250bb4e_JaffaCakes118
Files
-
fb71a5ca98bd642650e87c3fe250bb4e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE