Behavioral task
behavioral1
Sample
fbc38c40dc710e64f67b42db606d60cb_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fbc38c40dc710e64f67b42db606d60cb_JaffaCakes118
-
Size
22KB
-
MD5
fbc38c40dc710e64f67b42db606d60cb
-
SHA1
642b60871c24181f6619b447e725eba795db5aea
-
SHA256
d7d4dc34b39a2d982e66d25d9a546ba78e50167fd7ca0c27d945e44097ed4e04
-
SHA512
123398d5f22821472955cda5563215609515f6a64839fca56d073e47ec63add98a152876d9ad54fedf7f284cc4989ddbc875b3cc66cc045a127380f041d20e50
-
SSDEEP
384:2bCEXMMADQIrUeNFwx9E5xtT6fkCMst8AdxIiv4dK8y8KG8szTO4Am7UnwtzwGFN:y1NAUsbxtT6sFst/3IrdlLUw0nbcuyDc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc38c40dc710e64f67b42db606d60cb_JaffaCakes118
Files
-
fbc38c40dc710e64f67b42db606d60cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE