Behavioral task
behavioral1
Sample
fb79e95b611f5ec638dce17b6a9eaa8d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb79e95b611f5ec638dce17b6a9eaa8d_JaffaCakes118
-
Size
18KB
-
MD5
fb79e95b611f5ec638dce17b6a9eaa8d
-
SHA1
f6d20bc7f7b1e50a47e55e2960e104b962988887
-
SHA256
5aa00205feced04d236907d5214c40ad866269f074f964187391171a84a51775
-
SHA512
b1b0ab6a83e1a6c4b41fdb6f6344ecc7caf06be9b0e163fcc80f897de296a2b507e72cc863d8ea19fef9483ebc62a3022d6752de82140c813f4968535e3b2c72
-
SSDEEP
384:tOgdMyv2BNsjwV0UNu5rR92aZgHkb6NFwHnaNJawcudoD7U8q3PR:tlpcVhAH2T26LwHanbcuyD7UDJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb79e95b611f5ec638dce17b6a9eaa8d_JaffaCakes118
Files
-
fb79e95b611f5ec638dce17b6a9eaa8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE