Behavioral task
behavioral1
Sample
fb9eb96308be11109d44f6b673e31c95_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb9eb96308be11109d44f6b673e31c95_JaffaCakes118
-
Size
784KB
-
MD5
fb9eb96308be11109d44f6b673e31c95
-
SHA1
047179a9503104edd1cb83f3998478ce07a4c24a
-
SHA256
917b747c2cfc58f54df9c87e2b8bc5dba4d85c06d6e02df0ebc870a816b7494a
-
SHA512
74375e9984541f547dbbc30a3f1d5b59f0e8ee65900b5ab7e504146f187e660b47a507d8ecd57935bbb81afc19130823cba30c108fd0aabe40b291f86af1809f
-
SSDEEP
12288:OlHAyyU1z+AaKX/u9ZwSIiyu4qkquEX3QmF1S8Z3Kz2+NDFHskw05IVRwFdmtfWY:EzyUp+AbLDrquEp1LaFHt5IQmt+IY+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb9eb96308be11109d44f6b673e31c95_JaffaCakes118
Files
-
fb9eb96308be11109d44f6b673e31c95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE