Behavioral task
behavioral1
Sample
fdbc81bc3ccdf3db1f9628c02c2cd1e1_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
fdbc81bc3ccdf3db1f9628c02c2cd1e1_JaffaCakes118
-
Size
254KB
-
MD5
fdbc81bc3ccdf3db1f9628c02c2cd1e1
-
SHA1
a01ba178531e28b6cd89715a5a77983debae924f
-
SHA256
d272712de5c350920403dd2f77d151498b38fe4b3efb864c7d50d6d18fa35517
-
SHA512
2efc2ca5ebb7ad7d65e4aef1fcd7bd1e93ddba6f548789c4aeccd622403e67f4aa443e8f084376aeb746ca79d17c5ed1befa491a35fc8409f648421e3c9a1c53
-
SSDEEP
3072:hY2uYdg+IzfwdqGu0AUfdVLy9nrAFF/lUb1qQRAGOWa:CJYdgzIHu3UfeA/lUbR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdbc81bc3ccdf3db1f9628c02c2cd1e1_JaffaCakes118
Files
-
fdbc81bc3ccdf3db1f9628c02c2cd1e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE