scan
Behavioral task
behavioral1
Sample
fe7bb1ed2dea50af1ecdf6d7bf2d9e42_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe7bb1ed2dea50af1ecdf6d7bf2d9e42_JaffaCakes118
-
Size
14KB
-
MD5
fe7bb1ed2dea50af1ecdf6d7bf2d9e42
-
SHA1
9055477eb09563608e21d0cb79c9c9302976d60e
-
SHA256
526c52713f720a6391bae7afa841a5402b79dd3a32a2f063839ae5a587483889
-
SHA512
8ba375052608efea3bbef74676a0acee63319e3b5188c641be9cf70d849e29217c833955f72251908d4b0538f3ffbd121cde4160d0f1dfe69cbeba27a83d19a2
-
SSDEEP
384:sXvaOfAA3NfhgAljmrhFVJNatw9gvG/7FRC5lgEtVa:UdN6x9gCxRCLLa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe7bb1ed2dea50af1ecdf6d7bf2d9e42_JaffaCakes118
Files
-
fe7bb1ed2dea50af1ecdf6d7bf2d9e42_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE