Behavioral task
behavioral1
Sample
fbfbb9eead68db884b5ad69e968a3cf8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fbfbb9eead68db884b5ad69e968a3cf8_JaffaCakes118
-
Size
56KB
-
MD5
fbfbb9eead68db884b5ad69e968a3cf8
-
SHA1
f5253d60f7cf16988aecb9e173c2e167343ef6d3
-
SHA256
121c9ff642c7d9760729ee3b0705e66b6ccbaaea0fa922dbdb89fdfb2bf43219
-
SHA512
d46559f20112369c181a3793fc726b735057d77cc676307e4e8ba4b9253d7a604a54fcfb4813bad5f1f8157d0dd9a293f194a9b2447807b85ee36ebc9ab51bd2
-
SSDEEP
1536:Fkti2EhdyFBpfEr81P6I2K6XNHc639eZF:FMEhkrEr81P6NK6tc6Ne
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbfbb9eead68db884b5ad69e968a3cf8_JaffaCakes118
Files
-
fbfbb9eead68db884b5ad69e968a3cf8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE