Behavioral task
behavioral1
Sample
fd7cb22033576e802a7112003eb67195_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fd7cb22033576e802a7112003eb67195_JaffaCakes118
-
Size
506KB
-
MD5
fd7cb22033576e802a7112003eb67195
-
SHA1
654588d811d4b39f17d328f00fee64257c667a86
-
SHA256
9eabc17be096fa1572f88ce896f0e107dfe6af70e594a31c678a1759c28a8513
-
SHA512
8c6348042d4d9bdc4ecd7b6161c5a4cb6eb6e7500acbcd73bb6363ec3fa5e99ee57907af1a46d7423a378fabc14d839b94fc6341c9012378d6135989f526a4c5
-
SSDEEP
6144:t56zxHQGGAio9ApC90Q2t5LMRL3uFY+5/VlKVuoOMj5dCHaD/iY3AGKJJ86e8qqx:tkjGO9gC9UCzqOZt1aaXsbj2uyNMnO
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7cb22033576e802a7112003eb67195_JaffaCakes118
Files
-
fd7cb22033576e802a7112003eb67195_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE