Behavioral task
behavioral1
Sample
fd8df39ccc5e20a8499709be91c80316_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd8df39ccc5e20a8499709be91c80316_JaffaCakes118
-
Size
124KB
-
MD5
fd8df39ccc5e20a8499709be91c80316
-
SHA1
0e2e1fc89d61a533c6175ab007096b85f8f8e74a
-
SHA256
dd9092acd5159ec57eed79a9530a5328facda6e86a7094d24ccadcdc74cc703e
-
SHA512
b3d531716f4c3bb659a600714a6aad2952cd9fd93b3ae3a1e479ca06234cfc5e3d87e3d73140b514c4393da5ea9bffc48825b8e43b2c0df0c7ebf5d91d2c5b92
-
SSDEEP
3072:NeSQ41MZrrOwzrq5Ss9eYfphfFQkUcot3EpeBWLsEp73C2:NVYrJrOSsRwcpLpV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd8df39ccc5e20a8499709be91c80316_JaffaCakes118
Files
-
fd8df39ccc5e20a8499709be91c80316_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
42vab535 Size: 62B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqvrztrg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ