Behavioral task
behavioral1
Sample
fed9b30e5cb3a35d5ae5c8349e6f1cf0_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
fed9b30e5cb3a35d5ae5c8349e6f1cf0_JaffaCakes118
-
Size
144KB
-
MD5
fed9b30e5cb3a35d5ae5c8349e6f1cf0
-
SHA1
fd1007ed0f4720498e14d3e2a963c73c74d72283
-
SHA256
02b966465026a89d2a9bbdd6b8c153895efc0c8bfb34333b9bc644038ee32fef
-
SHA512
9630e0287dee619f764963c6cd717b4d766086ff1f5154be52175e00cc9f6b7f02ed951c8efb5441aef254f3e1f22d4141ab18a297c329ab9ae7a0dde4d52290
-
SSDEEP
3072:rHO7USsL5ypaGfUaJSES9gYEy0VNgIdiWQgjCIycQfEe8FYH27XyCqgAsl:RS4MfUaJOvEfVa22ciEtYH27yC2sl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed9b30e5cb3a35d5ae5c8349e6f1cf0_JaffaCakes118
Files
-
fed9b30e5cb3a35d5ae5c8349e6f1cf0_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 840KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE