Behavioral task
behavioral1
Sample
fcf8533e21def56e18c64ba2a7c2f530_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fcf8533e21def56e18c64ba2a7c2f530_JaffaCakes118
-
Size
57KB
-
MD5
fcf8533e21def56e18c64ba2a7c2f530
-
SHA1
5e312b2fe074bb4c27e163603c7a7899b99c2923
-
SHA256
cfafc112f44437b9267e7e396776548b4d4eee66673ac2f7153a43635a0789ff
-
SHA512
f5451f8c6a59ab7bdb4980a7a96b4d7ea5e344fcfdcf53b1212b0fa1af7725ee1070498e27da56799a329305dffd37c5e8f9ebd323118fac6734f79cab52d872
-
SSDEEP
1536:bWjzOlXyYJmoi6OuD2eUyJAt7j29SXib5uuoC1fzS:bWjz+XywmoilWUyJAtu9gib0eI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf8533e21def56e18c64ba2a7c2f530_JaffaCakes118
Files
-
fcf8533e21def56e18c64ba2a7c2f530_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExeS Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE