Behavioral task
behavioral1
Sample
fdb35ac3ff694c20d5bb44925cfdc8be_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fdb35ac3ff694c20d5bb44925cfdc8be_JaffaCakes118
-
Size
784KB
-
MD5
fdb35ac3ff694c20d5bb44925cfdc8be
-
SHA1
e3478deafdaa2d9f220aefbc687fddd7c22bf030
-
SHA256
ef0b52a13515e57189c63110dec06cb185699825a6a50f536ab94c4e5542e392
-
SHA512
a140eb7edddb8fe155c54cded1a76f77b2b62ad6dfaabf6d5a6533e5ee76ee61d16fd7ee307d0678654c86a2e873f87233c17f38830727be5d69162faef8c2df
-
SSDEEP
24576:56nu3YPUxV2wSbbLtC4DRkqqRAB4M8Och:cuGUHkbbLH2K
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb35ac3ff694c20d5bb44925cfdc8be_JaffaCakes118
Files
-
fdb35ac3ff694c20d5bb44925cfdc8be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE