Behavioral task
behavioral1
Sample
fdbc722521115e0edfec059ab34fd1d4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fdbc722521115e0edfec059ab34fd1d4_JaffaCakes118
-
Size
2.0MB
-
MD5
fdbc722521115e0edfec059ab34fd1d4
-
SHA1
c84a1a7c6cd94a886de7917bb29539e4b21bb132
-
SHA256
444eb4cbf44a824519a30b625c6997868475f1f5f932e56873cddf6a50bf51c3
-
SHA512
e53301c3397eb48261163ff6f87a0834c44ba87db9231601ca330bfd4e4bab4003e9ef87a1a8b1a168e280b19e7c15da7ccbc027feea02156e2511df9e2b16e1
-
SSDEEP
49152:sdydzBaJA0rgB0pjig9ao8fM4tW7YsHKYCDud:sGB0AkRrSfM4k0sHK/E
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdbc722521115e0edfec059ab34fd1d4_JaffaCakes118
Files
-
fdbc722521115e0edfec059ab34fd1d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE