Behavioral task
behavioral1
Sample
fbdbf91855d44c3a2b9a256fac6fcf05_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fbdbf91855d44c3a2b9a256fac6fcf05_JaffaCakes118
-
Size
1.6MB
-
MD5
fbdbf91855d44c3a2b9a256fac6fcf05
-
SHA1
8cadb8ed16408e9ec931e31abc9ae03969851ae9
-
SHA256
db05e78d2fdb9c41abd37be3c78d57b00ae613a8fe87cb866ff2b96958f5734e
-
SHA512
58db04144c5d65eeeedf06de621551b96b7d87296aa4cdba69bb8f21fa2b10c925f3561e1cc5bd596d8d6265ea9c1517695c43ee29561b1ddffabfa948197261
-
SSDEEP
49152:W/U3gyuwwNcDINH4/iXKnFQTdG2dHpxL3bz42BdsYYg:EU31uBuDINY/cTdG2NpxceVYg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdbf91855d44c3a2b9a256fac6fcf05_JaffaCakes118
Files
-
fbdbf91855d44c3a2b9a256fac6fcf05_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 980KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ