Behavioral task
behavioral1
Sample
fe8878c41087cfd598426610b28cbe48_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fe8878c41087cfd598426610b28cbe48_JaffaCakes118
-
Size
266KB
-
MD5
fe8878c41087cfd598426610b28cbe48
-
SHA1
e905ebf50177c0ffc26ad0c672ac2ef928c9dcab
-
SHA256
abd6bcd3eb81dc149a44732b45e3bdd2fa50a767c40c6cb5d3496268bd58f511
-
SHA512
7d417a2f35474a92ad7918377a4a24c8bc2525d7bfd1eb80bf8c3d124b12cca355e3bf7df00c5cd3c6df45c6f60fcec14f7c487b9c3a7dd3a4c9ee7b6587856e
-
SSDEEP
6144:QzFPC4rPGbkO38lKCiSBxshxhTT0ZSr0rGfacnPyg0v4SkJVPpQ:QJquGbp3/huOxhvL00pPynQ+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe8878c41087cfd598426610b28cbe48_JaffaCakes118
Files
-
fe8878c41087cfd598426610b28cbe48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE