Behavioral task
behavioral1
Sample
fdb276c9c9b357e82b8a3cd8a9130271_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fdb276c9c9b357e82b8a3cd8a9130271_JaffaCakes118
-
Size
29KB
-
MD5
fdb276c9c9b357e82b8a3cd8a9130271
-
SHA1
b19e3bd9e7eee14649194ce342cf0b63b57e1576
-
SHA256
379fcd1c89649430cfa04521d7abff9c91837f7bf82550b946fc9a4d7381bfc0
-
SHA512
dff34116721240df8dda864f90bc7a908e9a03796330fa6613c9d1c6e21e9a8b7a6d6bceb99a961fe521f2f2b027228421b1498d9abacf4f7b7307356addad9f
-
SSDEEP
384:ZfRnNoKByFnPfENNzK+PihZ3E0ArWhhTgkS4B6ewv9Os3T2OP02lIh30O/67j9vm:Zf5NSPZ/00As3SEwvMjO0B3M7jZcx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb276c9c9b357e82b8a3cd8a9130271_JaffaCakes118
Files
-
fdb276c9c9b357e82b8a3cd8a9130271_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE