Behavioral task
behavioral1
Sample
fd1d701c7d45d9850083733be5d200e5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd1d701c7d45d9850083733be5d200e5_JaffaCakes118
-
Size
90KB
-
MD5
fd1d701c7d45d9850083733be5d200e5
-
SHA1
333db3db7a946989caa73a609fcfce2577527f17
-
SHA256
92e40f26470c779d1cd2812b0b24329284a9c4744ed9e10ee2b886fe6d726f3a
-
SHA512
89a270deabf13d35e8dc86b37ea9f509f7bd6398d8d61472e2c402a3d38ce1a56387d60d8e60146cc7de29bc5b0239e03f9300434388731648877064b4f23fff
-
SSDEEP
1536:T+3A+wAwjp+fTnlOR/+xtuHnK6pJR6GgJ4:yw8wEfTno5qtuvp6GgJ4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd1d701c7d45d9850083733be5d200e5_JaffaCakes118
Files
-
fd1d701c7d45d9850083733be5d200e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE