Behavioral task
behavioral1
Sample
fbf51f89d853da8b9bb5307092cae1c7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
fbf51f89d853da8b9bb5307092cae1c7_JaffaCakes118
-
Size
395KB
-
MD5
fbf51f89d853da8b9bb5307092cae1c7
-
SHA1
b9c345fca37aee65aba70fe6e4244820341f7d2f
-
SHA256
2e757b3373ab9d656ba638e57205110efc9161b5ff789689eb5b7c99baebc19d
-
SHA512
686f744ee9ce641b7714d2bfc8c68afbc3f8acecc35f3b515a251042bdea6ee2d50374bb6a4f031322583e56b6905da09275f2bc3c382ea90ff87b8b89b84c4b
-
SSDEEP
12288:+FzOhlZF4hXdt40VtqSJCTb0/SXnLVOoi8:+FS1F4VdtpoypanZi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbf51f89d853da8b9bb5307092cae1c7_JaffaCakes118
Files
-
fbf51f89d853da8b9bb5307092cae1c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE